Task #131221 - fixed.err
back to task #131221download
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/bpf/test_bpftool.sh:6:22: warning[SC2046]: Quote this to prevent word splitting.
# 4|
# 5| # 'make -C tools/testing/selftests/bpf install' will install to SCRIPT_DIR
# 6|-> SCRIPT_DIR=$(dirname $(realpath $0))
# 7|
# 8| # 'make -C tools/testing/selftests/bpf' will install to BPFTOOL_INSTALL_PATH
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:18:22: warning[SC2046]: Quote this to prevent word splitting.
# 16| # under BPF_FS_PARENT.
# 17| BPF_DIR="$BPF_FS_PARENT/test_$TESTNAME"
# 18|-> SCRIPT_DIR=$(dirname $(realpath "$0"))
# 19| BPF_FILE_PATH="$SCRIPT_DIR/$BPF_FILE"
# 20| BPF_ITER_FILE_PATH="$SCRIPT_DIR/$BPF_ITER_FILE"
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:23:1: warning[SC2034]: KDIR_ROOT_DIR appears unused. Verify use (or export if used externally).
# 21| BPFTOOL_PATH="bpftool"
# 22| # Assume the script is located under tools/testing/selftests/bpf/
# 23|-> KDIR_ROOT_DIR=$(realpath "$SCRIPT_DIR"/../../../../)
# 24|
# 25| _cleanup()
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:69:7: warning[SC2046]: Quote this to prevent word splitting.
# 67|
# 68| check_root_privileges() {
# 69|-> if [ $(id -u) -ne 0 ]; then
# 70| echo "Need root privileges"
# 71| exit $ksft_skip
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:79:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 77| # $1: bpftool path
# 78| verify_bpftool_path() {
# 79|-> local bpftool_path="$1"
# 80| if ! "$bpftool_path" version > /dev/null 2>&1; then
# 81| echo "Could not run test without bpftool"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:100:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 98| # $2: bpftool path
# 99| initialize_map_entries() {
# 100|-> local map_name="$1"
# 101| local bpftool_path="$2"
# 102|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:101:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 99| initialize_map_entries() {
# 100| local map_name="$1"
# 101|-> local bpftool_path="$2"
# 102|
# 103| for key in 0 1 2; do
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:115:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 113| # $4: key
# 114| access_for_read() {
# 115|-> local name_cmd="$1"
# 116| local map_name="$2"
# 117| local bpftool_path="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:116:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 114| access_for_read() {
# 115| local name_cmd="$1"
# 116|-> local map_name="$2"
# 117| local bpftool_path="$3"
# 118| local key="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:117:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 115| local name_cmd="$1"
# 116| local map_name="$2"
# 117|-> local bpftool_path="$3"
# 118| local key="$4"
# 119|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:118:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 116| local map_name="$2"
# 117| local bpftool_path="$3"
# 118|-> local key="$4"
# 119|
# 120| # Test read access to the map.
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:141:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 139| # $5: Whether write should succeed (true/false)
# 140| access_for_write() {
# 141|-> local name_cmd="$1"
# 142| local map_name="$2"
# 143| local bpftool_path="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:142:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 140| access_for_write() {
# 141| local name_cmd="$1"
# 142|-> local map_name="$2"
# 143| local bpftool_path="$3"
# 144| local key="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:143:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 141| local name_cmd="$1"
# 142| local map_name="$2"
# 143|-> local bpftool_path="$3"
# 144| local key="$4"
# 145| local write_should_succeed="$5"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:144:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 142| local map_name="$2"
# 143| local bpftool_path="$3"
# 144|-> local key="$4"
# 145| local write_should_succeed="$5"
# 146| local value="1 1 1 1"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:145:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 143| local bpftool_path="$3"
# 144| local key="$4"
# 145|-> local write_should_succeed="$5"
# 146| local value="1 1 1 1"
# 147|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:146:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 144| local key="$4"
# 145| local write_should_succeed="$5"
# 146|-> local value="1 1 1 1"
# 147|
# 148| if "$bpftool_path" map update "$name_cmd" "$map_name" key $key value \
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:170:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 168| # $5: Whether write should succeed (true/false)
# 169| access_for_deletion() {
# 170|-> local name_cmd="$1"
# 171| local map_name="$2"
# 172| local bpftool_path="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:171:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 169| access_for_deletion() {
# 170| local name_cmd="$1"
# 171|-> local map_name="$2"
# 172| local bpftool_path="$3"
# 173| local key="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:172:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 170| local name_cmd="$1"
# 171| local map_name="$2"
# 172|-> local bpftool_path="$3"
# 173| local key="$4"
# 174| local write_should_succeed="$5"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:173:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 171| local map_name="$2"
# 172| local bpftool_path="$3"
# 173|-> local key="$4"
# 174| local write_should_succeed="$5"
# 175| local value="1 1 1 1"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:174:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 172| local bpftool_path="$3"
# 173| local key="$4"
# 174|-> local write_should_succeed="$5"
# 175| local value="1 1 1 1"
# 176|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:175:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 173| local key="$4"
# 174| local write_should_succeed="$5"
# 175|-> local value="1 1 1 1"
# 176|
# 177| # Test deletion by key for the map.
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:234:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 232| # $5: bpf iterator object file path
# 233| iterate_map_elem() {
# 234|-> local name_cmd="$1"
# 235| local map_name="$2"
# 236| local bpftool_path="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:235:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 233| iterate_map_elem() {
# 234| local name_cmd="$1"
# 235|-> local map_name="$2"
# 236| local bpftool_path="$3"
# 237| local bpf_dir="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:236:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 234| local name_cmd="$1"
# 235| local map_name="$2"
# 236|-> local bpftool_path="$3"
# 237| local bpf_dir="$4"
# 238| local bpf_file="$5"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:237:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 235| local map_name="$2"
# 236| local bpftool_path="$3"
# 237|-> local bpf_dir="$4"
# 238| local bpf_file="$5"
# 239| local pin_path="$bpf_dir/map_iterator"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:238:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 236| local bpftool_path="$3"
# 237| local bpf_dir="$4"
# 238|-> local bpf_file="$5"
# 239| local pin_path="$bpf_dir/map_iterator"
# 240|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:239:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 237| local bpf_dir="$4"
# 238| local bpf_file="$5"
# 239|-> local pin_path="$bpf_dir/map_iterator"
# 240|
# 241| "$bpftool_path" iter pin "$bpf_file" "$pin_path" map "$name_cmd" "$map_name"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:262:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 260| # $8: bpf iterator object file path
# 261| access_map() {
# 262|-> local name_cmd="$1"
# 263| local map_name="$2"
# 264| local bpftool_path="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:263:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 261| access_map() {
# 262| local name_cmd="$1"
# 263|-> local map_name="$2"
# 264| local bpftool_path="$3"
# 265| local key_for_rw="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:264:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 262| local name_cmd="$1"
# 263| local map_name="$2"
# 264|-> local bpftool_path="$3"
# 265| local key_for_rw="$4"
# 266| local key_to_del="$5"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:265:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 263| local map_name="$2"
# 264| local bpftool_path="$3"
# 265|-> local key_for_rw="$4"
# 266| local key_to_del="$5"
# 267| local write_should_succeed="$6"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:266:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 264| local bpftool_path="$3"
# 265| local key_for_rw="$4"
# 266|-> local key_to_del="$5"
# 267| local write_should_succeed="$6"
# 268| local bpf_dir="$7"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:267:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 265| local key_for_rw="$4"
# 266| local key_to_del="$5"
# 267|-> local write_should_succeed="$6"
# 268| local bpf_dir="$7"
# 269| local bpf_iter_file_path="$8"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:268:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 266| local key_to_del="$5"
# 267| local write_should_succeed="$6"
# 268|-> local bpf_dir="$7"
# 269| local bpf_iter_file_path="$8"
# 270|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:269:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 267| local write_should_succeed="$6"
# 268| local bpf_dir="$7"
# 269|-> local bpf_iter_file_path="$8"
# 270|
# 271| access_for_read "$name_cmd" "$map_name" "$bpftool_path" "$key_for_rw"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:288:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 286| # $5: bpf iterator object file path
# 287| test_map_access() {
# 288|-> local map_name="$1"
# 289| local bpftool_path="$2"
# 290| local bpf_dir="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:289:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 287| test_map_access() {
# 288| local map_name="$1"
# 289|-> local bpftool_path="$2"
# 290| local bpf_dir="$3"
# 291| local pin_path="$bpf_dir/${map_name}_pinned"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:290:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 288| local map_name="$1"
# 289| local bpftool_path="$2"
# 290|-> local bpf_dir="$3"
# 291| local pin_path="$bpf_dir/${map_name}_pinned"
# 292| local write_should_succeed="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:291:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 289| local bpftool_path="$2"
# 290| local bpf_dir="$3"
# 291|-> local pin_path="$bpf_dir/${map_name}_pinned"
# 292| local write_should_succeed="$4"
# 293| local bpf_iter_file_path="$5"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:292:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 290| local bpf_dir="$3"
# 291| local pin_path="$bpf_dir/${map_name}_pinned"
# 292|-> local write_should_succeed="$4"
# 293| local bpf_iter_file_path="$5"
# 294|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:293:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 291| local pin_path="$bpf_dir/${map_name}_pinned"
# 292| local write_should_succeed="$4"
# 293|-> local bpf_iter_file_path="$5"
# 294|
# 295| # Test access to the map by name.
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:316:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 314| # $2: BPF_DIR
# 315| test_map_creation_and_map_of_maps() {
# 316|-> local bpftool_path="$1"
# 317| local bpf_dir="$2"
# 318| local outer_map_name="outer_map_tt"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:317:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 315| test_map_creation_and_map_of_maps() {
# 316| local bpftool_path="$1"
# 317|-> local bpf_dir="$2"
# 318| local outer_map_name="outer_map_tt"
# 319| local inner_map_name="inner_map_tt"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:318:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 316| local bpftool_path="$1"
# 317| local bpf_dir="$2"
# 318|-> local outer_map_name="outer_map_tt"
# 319| local inner_map_name="inner_map_tt"
# 320|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:319:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 317| local bpf_dir="$2"
# 318| local outer_map_name="outer_map_tt"
# 319|-> local inner_map_name="inner_map_tt"
# 320|
# 321| "$bpftool_path" map create "$bpf_dir/$inner_map_name" type array key 4 \
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/test_bpftool_map.sh:354:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 352| # $1: bpftool path
# 353| test_map_access_with_btf_list() {
# 354|-> local bpftool_path="$1"
# 355|
# 356| # The btf list command iterates over maps for
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/bpf/test_bpftool_metadata.sh:38:6: warning[SC2046]: Quote this to prevent word splitting.
# 36| }
# 37|
# 38|-> if [ $(id -u) -ne 0 ]; then
# 39| echo "selftests: $TESTNAME [SKIP] Need root privileges"
# 40| exit $ksft_skip
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/bpf/vmtest.sh:386:3: warning[SC2213]: getopts specified -k, but it's not handled by this 'case'.
# 384|
# 385| while getopts ':hskl:id:j:' opt; do
# 386|-> case ${opt} in
# 387| l)
# 388| LOCAL_ROOTFS_IMAGE="$OPTARG"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/cgroup/test_cpuset_prs.sh:605:9: error[SC2157]: Argument to -n is always true due to literal strings.
# 603| online_cpus()
# 604| {
# 605|-> [[ -n "OFFLINE_CPUS" ]] && {
# 606| for C in $OFFLINE_CPUS
# 607| do
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/hw/ethtool_rmon.sh:4:1: warning[SC2034]: ALL_TESTS appears unused. Verify use (or export if used externally).
# 2| # SPDX-License-Identifier: GPL-2.0
# 3|
# 4|-> ALL_TESTS="
# 5| rmon_rx_histogram
# 6| rmon_tx_histogram
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/hw/ethtool_rmon.sh:9:1: warning[SC2034]: NUM_NETIFS appears unused. Verify use (or export if used externally).
# 7| "
# 8|
# 9|-> NUM_NETIFS=2
# 10| lib_dir=$(dirname "$0")
# 11| source "$lib_dir"/../../../net/forwarding/lib.sh
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/drivers/net/hw/ethtool_rmon.sh:22:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 20| local iface=$1; shift
# 21| local len=$1; shift
# 22|-> local current=$(ip -j link show dev $iface | jq -r '.[0].mtu')
# 23| local required=$((len - ETH_HLEN - ETH_FCS_LEN))
# 24|
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/hw/ethtool_rmon.sh:76:2: warning[SC2034]: RET appears unused. Verify use (or export if used externally).
# 74| local step=
# 75|
# 76|-> RET=0
# 77|
# 78| while read -r -a bucket; do
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/drivers/net/netdevsim/macsec-offload.sh:92:7: warning[SC2319]: This $? refers to a condition, not a command. Assign to a variable to avoid it being overwritten.
# 90|
# 91| [ "$TMP_FEATS_ON_1" = "$TMP_FEATS_ON_2" ]
# 92|-> check $?
# 93|
# 94| ip link del $MACSEC_NETDEV
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/drivers/net/netdevsim/macsec-offload.sh:101:7: warning[SC2319]: This $? refers to a condition, not a command. Assign to a variable to avoid it being overwritten.
# 99| TMP_FEATS_OFF_2="$(ethtool -k $MACSEC_NETDEV)"
# 100| [ "$TMP_FEATS_OFF_1" = "$TMP_FEATS_OFF_2" ]
# 101|-> check $?
# 102|
# 103| ip link set $MACSEC_NETDEV type macsec offload mac
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/drivers/net/netdevsim/macsec-offload.sh:111:6: warning[SC2154]: num_errors is referenced but not assigned.
# 109|
# 110|
# 111|-> if [ $num_errors -eq 0 ]; then
# 112| echo "PASSED all $((num_passes)) checks"
# 113| exit 0
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/drivers/net/netdevsim/macsec-offload.sh:112:25: warning[SC2154]: num_passes is referenced but not assigned.
# 110|
# 111| if [ $num_errors -eq 0 ]; then
# 112|-> echo "PASSED all $((num_passes)) checks"
# 113| exit 0
# 114| else
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/team/options.sh:14:1: warning[SC2034]: ALL_TESTS appears unused. Verify use (or export if used externally).
# 12| fi
# 13|
# 14|-> ALL_TESTS="
# 15| team_test_options
# 16| "
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/team/options.sh:151:9: warning[SC2034]: RET appears unused. Verify use (or export if used externally).
# 149| local port_flag
# 150|
# 151|-> RET=0
# 152|
# 153| attach_port_if_specified "${port_name}"
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/kselftest/runner.sh:50:16: warning[SC2154]: kselftest_failures_file is referenced but not assigned.
# 48| {
# 49| echo "not ok $*"
# 50|-> echo "$*" >> "$kselftest_failures_file"
# 51| }
# 52|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/kselftest/runner.sh:57:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 55| DIR="$1"
# 56| TEST="$2"
# 57|-> local test_num="$3"
# 58|
# 59| BASENAME_TEST=$(basename $TEST)
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/kselftest/runner.sh:137:3: error[SC1105]: Shells disambiguate (( differently or not at all. For subshell, add spaces around ( . For ((, fix parsing errors.
# 135| fi
# 136| cd `dirname $TEST` > /dev/null
# 137|-> ((((( tap_timeout "$cmd" 2>&1; echo $? >&3) |
# 138| tap_prefix >&4) 3>&1) |
# 139| (read xs; exit $xs)) 4>>"$logfile" &&
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/kselftest/runner.sh:137:4: error[SC1105]: Shells disambiguate (( differently or not at all. For subshell, add spaces around ( . For ((, fix parsing errors.
# 135| fi
# 136| cd `dirname $TEST` > /dev/null
# 137|-> ((((( tap_timeout "$cmd" 2>&1; echo $? >&3) |
# 138| tap_prefix >&4) 3>&1) |
# 139| (read xs; exit $xs)) 4>>"$logfile" &&
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/kselftest/runner.sh:137:5: error[SC1105]: Shells disambiguate (( differently or not at all. For subshell, add spaces around ( . For ((, fix parsing errors.
# 135| fi
# 136| cd `dirname $TEST` > /dev/null
# 137|-> ((((( tap_timeout "$cmd" 2>&1; echo $? >&3) |
# 138| tap_prefix >&4) 3>&1) |
# 139| (read xs; exit $xs)) 4>>"$logfile" &&
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/kselftest/runner.sh:137:6: error[SC1105]: Shells disambiguate (( differently or not at all. For subshell, add spaces around ( . For ((, fix parsing errors.
# 135| fi
# 136| cd `dirname $TEST` > /dev/null
# 137|-> ((((( tap_timeout "$cmd" 2>&1; echo $? >&3) |
# 138| tap_prefix >&4) 3>&1) |
# 139| (read xs; exit $xs)) 4>>"$logfile" &&
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:119:11: warning[SC2046]: Quote this to prevent word splitting.
# 117| local path="$cgroup_path/$cgroup/hugetlb.${MB}MB.$reservation_usage_file"
# 118| # Wait for hugetlbfs memory to get depleted.
# 119|-> while [ $(cat $path) != 0 ]; do
# 120| echo Waiting for hugetlb memory to get depleted.
# 121| cat $path
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:132:11: warning[SC2046]: Quote this to prevent word splitting.
# 130| local path="$cgroup_path/$cgroup/hugetlb.${MB}MB.$reservation_usage_file"
# 131| # Wait for hugetlbfs memory to get written.
# 132|-> while [ $(cat $path) != $size ]; do
# 133| echo Waiting for hugetlb memory reservation to reach size $size.
# 134| cat $path
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:145:11: warning[SC2046]: Quote this to prevent word splitting.
# 143| local path="$cgroup_path/$cgroup/hugetlb.${MB}MB.$fault_usage_file"
# 144| # Wait for hugetlbfs memory to get written.
# 145|-> while [ $(cat $path) != $size ]; do
# 146| echo Waiting for hugetlb memory to reach size $size.
# 147| cat $path
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:301:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 299| cleanup_hugetlb_memory "hugetlb_cgroup_test"
# 300|
# 301|-> local final_hugetlb=$(cat $cgroup_path/hugetlb_cgroup_test/hugetlb.${MB}MB.$fault_usage_file)
# 302| local final_reservation=$(cat $cgroup_path/hugetlb_cgroup_test/hugetlb.${MB}MB.$reservation_usage_file)
# 303|
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:302:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 300|
# 301| local final_hugetlb=$(cat $cgroup_path/hugetlb_cgroup_test/hugetlb.${MB}MB.$fault_usage_file)
# 302|-> local final_reservation=$(cat $cgroup_path/hugetlb_cgroup_test/hugetlb.${MB}MB.$reservation_usage_file)
# 303|
# 304| echo $hugetlb_difference
Error: SHELLCHECK_WARNING (CWE-398):
/usr/libexec/kselftests/mm/run_vmtests.sh:106:3: warning[SC2214]: This case is not specified by getopts.
# 104| "t") VM_SELFTEST_ITEMS=${OPTARG} ;;
# 105| "n") TAP_PREFIX= ;;
# 106|-> "d") RUN_DESTRUCTIVE=true ;;
# 107| esac
# 108| done
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/mm/run_vmtests.sh:187:27: warning[SC2034]: unit appears unused. Verify use (or export if used externally).
# 185| exit $ksft_skip
# 186| fi
# 187|-> while read -r name size unit; do
# 188| if [ "$name" = "HugePages_Free:" ]; then
# 189| freepgs=$size
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/mm/run_vmtests.sh:352:7: warning[SC2046]: Quote this to prevent word splitting.
# 350| echo 1 > "$f"
# 351| fi
# 352|-> if [ $(cat "$f") == 0 ]; then
# 353| have_all_size_hugepgs=false
# 354| break
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/mm/va_high_addr_switch.sh:93:26: warning[SC2034]: unit appears unused. Verify use (or export if used externally).
# 91| {
# 92| local needpgs=$1
# 93|-> while read -r name size unit; do
# 94| if [ "$name" = "HugePages_Free:" ]; then
# 95| freepgs="$size"
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/mm/va_high_addr_switch.sh:105:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 103| echo $hpgs > /proc/sys/vm/nr_hugepages
# 104|
# 105|-> local nr_hugepgs=$(cat /proc/sys/vm/nr_hugepages)
# 106| if [ "$nr_hugepgs" != "$hpgs" ]; then
# 107| restore_nr_hugepages
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/fib_tests.sh:548:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 546| {
# 547| local lldummy=$(get_linklocal dummy0)
# 548|-> local llv1=$(get_linklocal dummy0)
# 549|
# 550| if [ -z "$lldummy" ]; then
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/forwarding/bridge_vlan_mcast.sh:204:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 202| sleep $time
# 203|
# 204|-> local tcstats=$(tc_rule_stats_get $dev 10 egress)
# 205| local post_tx_xstats=$(vlmc_query_cnt_xstats $type $version $dev)
# 206|
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/forwarding/ipip_lib.sh:147:17: warning[SC2154]: h1 is referenced but not assigned.
# 145| h1_create()
# 146| {
# 147|-> simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/64
# 148| ip route add vrf v$h1 192.0.2.16/28 via 192.0.2.2
# 149| }
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/forwarding/lib.sh:1854:2: warning[SC2034]: RET appears unused. Verify use (or export if used externally).
# 1852| local ip=${1-ip}; shift
# 1853|
# 1854|-> RET=0
# 1855|
# 1856| # Expect a notification about enablement.
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:34:11: warning[SC2154]: ns1 is referenced but not assigned.
# 32| echo "INFO: Initial validation ping."
# 33| # Each node has to be able each one.
# 34|-> do_ping "$ns1" 100.64.0.2
# 35| do_ping "$ns2" 100.64.0.1
# 36| do_ping "$ns3" 100.64.0.1
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:35:11: warning[SC2154]: ns2 is referenced but not assigned.
# 33| # Each node has to be able each one.
# 34| do_ping "$ns1" 100.64.0.2
# 35|-> do_ping "$ns2" 100.64.0.1
# 36| do_ping "$ns3" 100.64.0.1
# 37| stop_if_error "Initial validation failed."
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:36:11: warning[SC2154]: ns3 is referenced but not assigned.
# 34| do_ping "$ns1" 100.64.0.2
# 35| do_ping "$ns2" 100.64.0.1
# 36|-> do_ping "$ns3" 100.64.0.1
# 37| stop_if_error "Initial validation failed."
# 38|
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/lib.sh:78:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 76| local timeout_ms=$1; shift
# 77|
# 78|-> local start_time="$(date -u +%s%3N)"
# 79| while true
# 80| do
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/lib.sh:87:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 85| fi
# 86|
# 87|-> local current_time="$(date -u +%s%3N)"
# 88| if ((current_time - start_time > timeout_ms)); then
# 89| echo -n "$out"
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/mptcp/userspace_pm.sh:215:45: warning[SC2154]: port is referenced but not assigned (did you mean 'dport'?).
# 213| local server_pid=$!
# 214|
# 215|-> mptcp_lib_wait_local_port_listen "${ns1}" "${port}"
# 216|
# 217| # Run the client, transfer $file and stay connected to the server
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/netfilter/conntrack_sctp_collision.sh:54:8: warning[SC2154]: ksft_skip is referenced but not assigned.
# 52| if ! tc -n "$SERVER_NS" qdisc add dev link0 parent 1:1 handle 10: netem delay 1200ms; then
# 53| echo "SKIP: Cannot add netem qdisc"
# 54|-> exit $ksft_skip
# 55| fi
# 56|
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/netfilter/nft_queue.sh:540:8: warning[SC2034]: rpid1 appears unused. Verify use (or export if used externally).
# 538|
# 539| timeout 10 ip netns exec "$ns2" socat UDP-LISTEN:12345,fork,pf=ipv4 OPEN:"$TMPFILE1",trunc &
# 540|-> local rpid1=$!
# 541|
# 542| timeout 10 ip netns exec "$ns3" socat UDP-LISTEN:12345,fork,pf=ipv4 OPEN:"$TMPFILE2",trunc &
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/netfilter/nft_queue.sh:543:8: warning[SC2034]: rpid2 appears unused. Verify use (or export if used externally).
# 541|
# 542| timeout 10 ip netns exec "$ns3" socat UDP-LISTEN:12345,fork,pf=ipv4 OPEN:"$TMPFILE2",trunc &
# 543|-> local rpid2=$!
# 544|
# 545| ip netns exec "$nsrouter" ./nf_queue -q 12 -d 1000 &
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/so_txtime.sh:12:10: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 10| readonly BIN="./so_txtime"
# 11|
# 12|-> readonly RAND="$(mktemp -u XXXXXX)"
# 13| readonly NSPREFIX="ns-${RAND}"
# 14| readonly NS1="${NSPREFIX}1"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:51:8: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 49|
# 50| run_test() {
# 51|-> local readonly IP="$1"
# 52| local readonly CLOCK="$2"
# 53| local readonly TXARGS="$3"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:52:8: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 50| run_test() {
# 51| local readonly IP="$1"
# 52|-> local readonly CLOCK="$2"
# 53| local readonly TXARGS="$3"
# 54| local readonly RXARGS="$4"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:53:8: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 51| local readonly IP="$1"
# 52| local readonly CLOCK="$2"
# 53|-> local readonly TXARGS="$3"
# 54| local readonly RXARGS="$4"
# 55|
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:54:8: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 52| local readonly CLOCK="$2"
# 53| local readonly TXARGS="$3"
# 54|-> local readonly RXARGS="$4"
# 55|
# 56| if [[ "${IP}" == "4" ]]; then
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:57:9: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 55|
# 56| if [[ "${IP}" == "4" ]]; then
# 57|-> local readonly SADDR="${SADDR4}"
# 58| local readonly DADDR="${DADDR4}"
# 59| elif [[ "${IP}" == "6" ]]; then
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:58:9: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 56| if [[ "${IP}" == "4" ]]; then
# 57| local readonly SADDR="${SADDR4}"
# 58|-> local readonly DADDR="${DADDR4}"
# 59| elif [[ "${IP}" == "6" ]]; then
# 60| local readonly SADDR="${SADDR6}"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:60:9: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 58| local readonly DADDR="${DADDR4}"
# 59| elif [[ "${IP}" == "6" ]]; then
# 60|-> local readonly SADDR="${SADDR6}"
# 61| local readonly DADDR="${DADDR6}"
# 62| else
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:61:9: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 59| elif [[ "${IP}" == "6" ]]; then
# 60| local readonly SADDR="${SADDR6}"
# 61|-> local readonly DADDR="${DADDR6}"
# 62| else
# 63| echo "Invalid IP version ${IP}"
Error: SHELLCHECK_WARNING:
/usr/libexec/kselftests/net/so_txtime.sh:67:8: error[SC2316]: This applies local to the variable named readonly, which is probably not what you want. Use a separate command or the appropriate `declare` options instead.
# 65| fi
# 66|
# 67|-> local readonly START="$(date +%s%N --date="+ 0.1 seconds")"
# 68|
# 69| ip netns exec "${NS2}" "${BIN}" -"${IP}" -c "${CLOCK}" -t "${START}" -S "${SADDR}" -D "${DADDR}" "${RXARGS}" -r &
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/so_txtime.sh:67:8: warning[SC2034]: readonly appears unused. Verify use (or export if used externally).
# 65| fi
# 66|
# 67|-> local readonly START="$(date +%s%N --date="+ 0.1 seconds")"
# 68|
# 69| ip netns exec "${NS2}" "${BIN}" -"${IP}" -c "${CLOCK}" -t "${START}" -S "${SADDR}" -D "${DADDR}" "${RXARGS}" -r &
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/so_txtime.sh:67:17: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 65| fi
# 66|
# 67|-> local readonly START="$(date +%s%N --date="+ 0.1 seconds")"
# 68|
# 69| ip netns exec "${NS2}" "${BIN}" -"${IP}" -c "${CLOCK}" -t "${START}" -S "${SADDR}" -D "${DADDR}" "${RXARGS}" -r &
Error: SHELLCHECK_WARNING (CWE-88):
/usr/libexec/kselftests/net/so_txtime.sh:75:11: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
# 73|
# 74| do_test() {
# 75|-> run_test $@
# 76| [ $? -ne 0 ] && ret=1
# 77| }
Error: SHELLCHECK_WARNING (CWE-88):
/usr/libexec/kselftests/net/so_txtime.sh:80:11: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
# 78|
# 79| do_fail_test() {
# 80|-> run_test $@
# 81| [ $? -eq 0 ] && ret=1
# 82| }
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/test_bridge_neigh_suppress.sh:915:7: warning[SC2154]: ksft_skip is referenced but not assigned.
# 913| if [ "$(id -u)" -ne 0 ];then
# 914| echo "SKIP: Need root privileges"
# 915|-> exit $ksft_skip;
# 916| fi
# 917|
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/run_kselftest.sh:9:29: warning[SC2046]: Quote this to prevent word splitting.
# 7| # Fallback to readlink if realpath is not available
# 8| if which realpath > /dev/null; then
# 9|-> BASE_DIR=$(realpath $(dirname $0))
# 10| else
# 11| BASE_DIR=$(readlink -f $(dirname $0))
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/run_kselftest.sh:11:32: warning[SC2046]: Quote this to prevent word splitting.
# 9| BASE_DIR=$(realpath $(dirname $0))
# 10| else
# 11|-> BASE_DIR=$(readlink -f $(dirname $0))
# 12| fi
# 13|
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/run_kselftest.sh:24:1: warning[SC2034]: ROOT appears unused. Verify use (or export if used externally).
# 22|
# 23| . ./kselftest/runner.sh
# 24|-> ROOT=$PWD
# 25|
# 26| usage()
Error: SHELLCHECK_WARNING (CWE-758):
/usr/libexec/perf-core/tests/shell/lib/coresight.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
# 1|-> # SPDX-License-Identifier: GPL-2.0
# 2| # Carsten Haitzler <carsten.haitzler@arm.com>, 2021
# 3|
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/perf-core/tests/shell/lib/coresight.sh:13:1: warning[SC2034]: PERFRECOPT appears unused. Verify use (or export if used externally).
# 11| # perf record options for the perf tests to use
# 12| PERFRECMEM="-m ,16M"
# 13|-> PERFRECOPT="$PERFRECMEM -e cs_etm//u"
# 14|
# 15| TOOLS=$(dirname $0)
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/checksyscalls.sh:272:30: warning[SC2046]: Quote this to prevent word splitting.
# 270| }
# 271|
# 272|-> (ignore_list && syscall_list $(dirname $0)/../arch/x86/entry/syscalls/syscall_32.tbl) | \
# 273| $* -Wno-error -Wno-unused-macros -E -x c - > /dev/null
Error: SHELLCHECK_WARNING (CWE-477):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/coccicheck:141:36: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
# 139| echo "Running ($NPROC in parallel): $@"
# 140| fi
# 141|-> if [ "$DEBUG_FILE" != "/dev/null" -a "$DEBUG_FILE" != "" ]; then
# 142| echo $@>>$DEBUG_FILE
# 143| $@ 2>>$DEBUG_FILE
Error: SHELLCHECK_WARNING (CWE-477):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/coccicheck:262:35: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
# 260| }
# 261|
# 262|-> if [ "$DEBUG_FILE" != "/dev/null" -a "$DEBUG_FILE" != "" ]; then
# 263| if [ -f $DEBUG_FILE ]; then
# 264| echo "Debug file $DEBUG_FILE exists, bailing"
Error: SHELLCHECK_WARNING (CWE-398):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/kconfig/merge_config.sh:165:13: error[SC1087]: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
# 163| fi
# 164| if [ "$BUILTIN_FLAG" = "false" ]; then
# 165|-> sed -i "/$CFG[ =]/d" $TMP_FILE
# 166| else
# 167| sed -i "/$CFG[ =]/d" $MERGE_FILE
Error: SHELLCHECK_WARNING (CWE-398):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/kconfig/merge_config.sh:167:13: error[SC1087]: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
# 165| sed -i "/$CFG[ =]/d" $TMP_FILE
# 166| else
# 167|-> sed -i "/$CFG[ =]/d" $MERGE_FILE
# 168| fi
# 169| done
Error: SHELLCHECK_WARNING:
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/link-vmlinux.sh:113:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 111| gen_btf()
# 112| {
# 113|-> local btf_data=${1}.btf.o
# 114|
# 115| info BTF "${btf_data}"
Error: SHELLCHECK_WARNING (CWE-563):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/livepatch/klp-build:559:9: warning[SC2034]: file_dir appears unused. Verify use (or export if used externally).
# 557| local rel_file="${_file/.ko/.o}"
# 558| local file="$OBJ/$rel_file"
# 559|-> local file_dir="$(dirname "$file")"
# 560| local orig_file="$ORIG_DIR/$rel_file"
# 561| local orig_dir="$(dirname "$orig_file")"
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/rust_is_available.sh:169:18: warning[SC2046]: Quote this to prevent word splitting.
# 167| [ "$rust_bindings_generator_cversion" -eq 6601 ]; then
# 168| # Distributions may have patched the issue (e.g. Debian did).
# 169|-> if ! "$BINDGEN" $(dirname $0)/rust_is_available_bindgen_0_66.h >/dev/null; then
# 170| echo >&2 "***"
# 171| echo >&2 "*** Rust bindings generator '$BINDGEN' versions 0.66.0 and 0.66.1 may not"
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64+debug/scripts/rust_is_available.sh:233:18: warning[SC2046]: Quote this to prevent word splitting.
# 231| [ "$rust_bindings_generator_cversion" -lt 6905 ]; then
# 232| # Distributions may have patched the issue (e.g. Debian did).
# 233|-> if ! "$BINDGEN" $(dirname $0)/rust_is_available_bindgen_libclang_concat.h | grep -q foofoo; then
# 234| echo >&2 "***"
# 235| echo >&2 "*** Rust bindings generator '$BINDGEN' < 0.69.5 together with libclang >= 19.1"
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/checksyscalls.sh:272:30: warning[SC2046]: Quote this to prevent word splitting.
# 270| }
# 271|
# 272|-> (ignore_list && syscall_list $(dirname $0)/../arch/x86/entry/syscalls/syscall_32.tbl) | \
# 273| $* -Wno-error -Wno-unused-macros -E -x c - > /dev/null
Error: SHELLCHECK_WARNING (CWE-477):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/coccicheck:141:36: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
# 139| echo "Running ($NPROC in parallel): $@"
# 140| fi
# 141|-> if [ "$DEBUG_FILE" != "/dev/null" -a "$DEBUG_FILE" != "" ]; then
# 142| echo $@>>$DEBUG_FILE
# 143| $@ 2>>$DEBUG_FILE
Error: SHELLCHECK_WARNING (CWE-477):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/coccicheck:262:35: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
# 260| }
# 261|
# 262|-> if [ "$DEBUG_FILE" != "/dev/null" -a "$DEBUG_FILE" != "" ]; then
# 263| if [ -f $DEBUG_FILE ]; then
# 264| echo "Debug file $DEBUG_FILE exists, bailing"
Error: SHELLCHECK_WARNING (CWE-398):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/kconfig/merge_config.sh:165:13: error[SC1087]: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
# 163| fi
# 164| if [ "$BUILTIN_FLAG" = "false" ]; then
# 165|-> sed -i "/$CFG[ =]/d" $TMP_FILE
# 166| else
# 167| sed -i "/$CFG[ =]/d" $MERGE_FILE
Error: SHELLCHECK_WARNING (CWE-398):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/kconfig/merge_config.sh:167:13: error[SC1087]: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
# 165| sed -i "/$CFG[ =]/d" $TMP_FILE
# 166| else
# 167|-> sed -i "/$CFG[ =]/d" $MERGE_FILE
# 168| fi
# 169| done
Error: SHELLCHECK_WARNING:
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/link-vmlinux.sh:113:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
# 111| gen_btf()
# 112| {
# 113|-> local btf_data=${1}.btf.o
# 114|
# 115| info BTF "${btf_data}"
Error: SHELLCHECK_WARNING (CWE-563):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/livepatch/klp-build:559:9: warning[SC2034]: file_dir appears unused. Verify use (or export if used externally).
# 557| local rel_file="${_file/.ko/.o}"
# 558| local file="$OBJ/$rel_file"
# 559|-> local file_dir="$(dirname "$file")"
# 560| local orig_file="$ORIG_DIR/$rel_file"
# 561| local orig_dir="$(dirname "$orig_file")"
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/rust_is_available.sh:169:18: warning[SC2046]: Quote this to prevent word splitting.
# 167| [ "$rust_bindings_generator_cversion" -eq 6601 ]; then
# 168| # Distributions may have patched the issue (e.g. Debian did).
# 169|-> if ! "$BINDGEN" $(dirname $0)/rust_is_available_bindgen_0_66.h >/dev/null; then
# 170| echo >&2 "***"
# 171| echo >&2 "*** Rust bindings generator '$BINDGEN' versions 0.66.0 and 0.66.1 may not"
Error: SHELLCHECK_WARNING (CWE-156):
/usr/src/kernels/6.19.10-300.fc45.x86_64/scripts/rust_is_available.sh:233:18: warning[SC2046]: Quote this to prevent word splitting.
# 231| [ "$rust_bindings_generator_cversion" -lt 6905 ]; then
# 232| # Distributions may have patched the issue (e.g. Debian did).
# 233|-> if ! "$BINDGEN" $(dirname $0)/rust_is_available_bindgen_libclang_concat.h | grep -q foofoo; then
# 234| echo >&2 "***"
# 235| echo >&2 "*** Rust bindings generator '$BINDGEN' < 0.69.5 together with libclang >= 19.1"
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/events/intel/uncore_snbep.c:4364:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ret’
# 4362|
# 4363| pci_dev_put(dev);
# 4364|-> return ret;
# 4365| }
# 4366|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/include/asm/bitops.h:202:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:514:21: enter_function: entry to ‘gfs2_meta_ra’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:521:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:523:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:528:20: call_function: calling ‘gfs2_getbuf’ from ‘gfs2_meta_ra’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:528:20: return_function: return of NULL to ‘gfs2_meta_ra’ from ‘gfs2_getbuf’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:530:13: call_function: inlined call to ‘buffer_uptodate’ from ‘gfs2_meta_ra’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:530:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:532:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:537:16: branch_false: following ‘false’ branch (when ‘extlen == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:548:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:548:9: call_function: calling ‘wait_on_buffer’ from ‘gfs2_meta_ra’
# 200| {
# 201| return ((1UL << (nr & (BITS_PER_LONG-1))) &
# 202|-> (addr[nr >> _BITOPS_LONG_SHIFT])) != 0;
# 203| }
# 204|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:1363:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2570:5: enter_function: entry to ‘sev_mem_enc_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2575:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2578:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2578:12: branch_false: following ‘false’ branch (when ‘argp’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2581:13: call_function: inlined call to ‘copy_from_user’ from ‘sev_mem_enc_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2581:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2584:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/kvm/svm/sev.c:2634:21: call_function: calling ‘sev_dbg_crypt’ from ‘sev_mem_enc_ioctl’
# 1361| err:
# 1362| return ret;
# 1363|-> }
# 1364|
# 1365| static int sev_launch_secret(struct kvm *kvm, struct kvm_sev_cmd *argp)
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/power/cpu.c:417:51: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/power/cpu.c:458:12: enter_function: entry to ‘msr_save_cpuid_features’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/arch/x86/power/cpu.c:467:16: call_function: calling ‘msr_build_context’ from ‘msr_save_cpuid_features’
# 415| u64 dummy;
# 416|
# 417|-> msr_array[i].info.msr_no = msr_id[j];
# 418| msr_array[i].valid = !rdmsrq_safe(msr_id[j], &dummy);
# 419| msr_array[i].info.reg.q = 0;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:1191:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:730:6: enter_function: entry to ‘submit_bio_noacct_nocheck’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:749:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:754:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:754:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:755:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/block/blk-core.c:755:17: call_function: calling ‘__submit_bio_noacct_mq’ from ‘submit_bio_noacct_nocheck’
# 1189| list);
# 1190| list_del(&cb->list);
# 1191|-> cb->callback(cb, from_schedule);
# 1192| }
# 1193| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:435:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:429:36: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:432:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:435:18: danger: dereference of NULL ‘<unknown>’
# 433| strscpy(acpi_device_class(adev), ACPI_PROCESSOR_AGGREGATOR_CLASS);
# 434|
# 435|-> status = acpi_install_notify_handler(adev->handle,
# 436| ACPI_DEVICE_NOTIFY, acpi_pad_notify, adev);
# 437|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:452:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:446:36: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:448:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_pad.c:452:9: danger: dereference of NULL ‘<unknown>’
# 450| mutex_unlock(&isolated_cpus_lock);
# 451|
# 452|-> acpi_remove_notify_handler(adev->handle,
# 453| ACPI_DEVICE_NOTIFY, acpi_pad_notify);
# 454| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_video.c:1996:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_video.c:1989:12: enter_function: entry to ‘acpi_video_bus_add’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_video.c:1997:33: call_function: inlined call to ‘acpi_dev_parent’ from ‘acpi_video_bus_add’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_video.c:1996:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/acpi_video.c:1996:18: danger: dereference of NULL ‘<unknown>’
# 1994| acpi_status status;
# 1995|
# 1996|-> status = acpi_walk_namespace(ACPI_TYPE_DEVICE,
# 1997| acpi_dev_parent(device)->handle, 1,
# 1998| acpi_video_bus_match, NULL,
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/ata/libata-eh.c:3093:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘rc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/ata/libata-eh.c:4104:6: enter_function: entry to ‘ata_std_error_handler’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/ata/libata-eh.c:4119:14: call_function: calling ‘ata_eh_recover’ from ‘ata_std_error_handler’
# 3091| if (slave) {
# 3092| postreset(slave, classes);
# 3093|-> trace_ata_slave_postreset(slave, classes, rc);
# 3094| }
# 3095| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:70:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:672:5: enter_function: entry to ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:681:15: call_function: calling ‘find_group’ from ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:681:15: return_function: returning to ‘devres_release_group’ from ‘find_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:682:12: branch_true: following ‘true’ branch (when ‘grp’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:683:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:689:23: call_function: calling ‘remove_nodes’ from ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:689:23: return_function: returning to ‘devres_release_group’ from ‘remove_nodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:692:17: call_function: calling ‘release_nodes’ from ‘devres_release_group’
# 68| const char *op)
# 69| {
# 70|-> trace_devres_log(dev, op, node, node->name, node->size);
# 71| devres_dbg(dev, node, op);
# 72| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:505:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:672:5: enter_function: entry to ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:681:15: call_function: calling ‘find_group’ from ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:681:15: return_function: returning to ‘devres_release_group’ from ‘find_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:682:12: branch_true: following ‘true’ branch (when ‘grp’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:683:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:689:23: call_function: calling ‘remove_nodes’ from ‘devres_release_group’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:689:23: return_function: returning to ‘devres_release_group’ from ‘remove_nodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/base/devres.c:692:17: call_function: calling ‘release_nodes’ from ‘devres_release_group’
# 503| list_for_each_entry_safe_reverse(dr, tmp, todo, node.entry) {
# 504| devres_log(dev, &dr->node, "REL");
# 505|-> dr->node.release(dev, dr->data);
# 506| kfree(dr);
# 507| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:301:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘name_size_alg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:259:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:265:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:266:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:271:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:272:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:277:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:280:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:283:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:283:20: branch_false: following ‘false’ branch (when ‘name’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:299:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/char/tpm/tpm2-sessions.c:301:17: danger: use of uninitialized value ‘name_size_alg’ here
# 299| auth->name_h[slot] = handle;
# 300| if (name)
# 301|-> memcpy(auth->name[slot], name, name_size_alg);
# 302| #endif
# 303| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:207:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:202:6: enter_function: entry to ‘cxl_memdev_has_poison_cmd’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:205:40: call_function: inlined call to ‘to_cxl_memdev_state’ from ‘cxl_memdev_has_poison_cmd’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:207:16: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:207:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/memdev.c:207:16: danger: dereference of NULL ‘<unknown>’
# 205| struct cxl_memdev_state *mds = to_cxl_memdev_state(cxlmd->cxlds);
# 206|
# 207|-> return test_bit(cmd, mds->poison.enabled_cmds);
# 208| }
# 209|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/port.c:1559:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/port.c:1550:12: enter_function: entry to ‘match_port_by_uport’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/port.c:1558:16: call_function: calling ‘to_cxl_port’ from ‘match_port_by_uport’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/port.c:1558:16: return_function: return of NULL to ‘match_port_by_uport’ from ‘to_cxl_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/core/port.c:1559:29: danger: dereference of NULL ‘port’
# 1557|
# 1558| port = to_cxl_port(dev);
# 1559|-> return uport_dev == port->uport_dev;
# 1560| }
# 1561|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:133:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:106:12: enter_function: entry to ‘cxl_mem_probe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:109:40: call_function: inlined call to ‘to_cxl_memdev_state’ from ‘cxl_mem_probe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:112:27: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:116:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:127:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:127:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:127:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:127:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:130:18: call_function: inlined call to ‘dev_name’ from ‘cxl_mem_probe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:133:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:133:13: danger: dereference of NULL ‘<unknown>’
# 131| debugfs_create_devm_seqfile(dev, "dpamem", dentry, cxl_mem_dpa_show);
# 132|
# 133|-> if (test_bit(CXL_POISON_ENABLED_INJECT, mds->poison.enabled_cmds))
# 134| debugfs_create_file("inject_poison", 0200, dentry, cxlmd,
# 135| &cxl_poison_inject_fops);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:227:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:220:16: enter_function: entry to ‘cxl_mem_visible’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:224:40: call_function: inlined call to ‘to_cxl_memdev_state’ from ‘cxl_mem_visible’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:226:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:226:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:227:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:227:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/cxl/mem.c:227:22: danger: dereference of NULL ‘<unknown>’
# 225|
# 226| if (a == &dev_attr_trigger_poison_list.attr)
# 227|-> if (!test_bit(CXL_POISON_ENABLED_LIST,
# 228| mds->poison.enabled_cmds))
# 229| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:405:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:388:1: enter_function: entry to ‘msgdma_prep_slave_sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:404:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:405:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:404:9: call_function: inlined call to ‘sg_next’ from ‘msgdma_prep_slave_sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:404:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:405:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/altera-msgdma.c:405:29: danger: dereference of NULL ‘sg’
# 403|
# 404| for_each_sg(sgl, sg, sg_len, i)
# 405|-> desc_cnt += DIV_ROUND_UP(sg_dma_len(sg), MSGDMA_MAX_TRANS_LEN);
# 406|
# 407| spin_lock_irqsave(&mdev->lock, irqflags);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:601:1: enter_function: entry to ‘xdma_prep_device_sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:612:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:612:9: call_function: inlined call to ‘sg_next’ from ‘xdma_prep_device_sg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:612:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:29: danger: dereference of NULL ‘sg’
# 611|
# 612| for_each_sg(sgl, sg, sg_len, i)
# 613|-> desc_num += DIV_ROUND_UP(sg_dma_len(sg), XDMA_DESC_BLEN_MAX);
# 614|
# 615| sw_desc = xdma_alloc_desc(xdma_chan, desc_num, false);
Error: GCC_ANALYZER_WARNING (CWE-1335):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:486:9: warning[-Wanalyzer-shift-count-negative]: shift by negative count (‘-22’)
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:457:5: enter_function: entry to ‘skx_get_dimm_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:465:17: call_function: calling ‘skx_get_dimm_attr’ from ‘skx_get_dimm_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:465:17: return_function: returning to ‘skx_get_dimm_info’ from ‘skx_get_dimm_attr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:466:16: call_function: calling ‘skx_get_dimm_attr’ from ‘skx_get_dimm_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:466:16: return_function: returning to ‘skx_get_dimm_info’ from ‘skx_get_dimm_attr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:486:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/edac/skx_common.c:486:9: danger: shift by negative amount here (‘-22’)
# 484| npages = MiB_TO_PAGES(size);
# 485|
# 486|-> edac_dbg(0, "mc#%d: channel %d, dimm %d, %lld MiB (%d pages) bank: %d, rank: %d, row: 0x%x, col: 0x%x\n",
# 487| imc->mc, chan, dimmno, size, npages,
# 488| banks, 1 << ranks, rows, cols);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1250:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘max_digital_pixel_clock_khz’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1227:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1228:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1247:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1250:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c:1250:20: danger: use of uninitialized value ‘max_digital_pixel_clock_khz’ here
# 1248| max_digital_pixel_clock_khz = max_hdmi_pixel_clock;
# 1249|
# 1250|-> if (mode->clock > max_digital_pixel_clock_khz)
# 1251| return MODE_CLOCK_HIGH;
# 1252| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:350:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘r’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:315:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:327:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:350:12: danger: use of uninitialized value ‘r’ here
# 348|
# 349| out_unlock:
# 350|-> if (r)
# 351| dev_err(adev->dev, "leaking bo va (%ld)\n", r);
# 352| drm_exec_fini(&exec);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:783:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bo_va’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:799:5: enter_function: entry to ‘amdgpu_gem_va_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:823:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:830:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:830:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:839:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:843:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:850:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:857:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:869:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:884:12: branch_false: following ‘false’ branch (when ‘r == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:887:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:904:12: branch_false: following ‘false’ branch (when ‘abo’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:910:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:910:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:923:45: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:921:13: call_function: calling ‘amdgpu_gem_update_timeline_node’ from ‘amdgpu_gem_va_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:921:13: return_function: returning to ‘amdgpu_gem_va_ioctl’ from ‘amdgpu_gem_update_timeline_node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:926:12: branch_false: following ‘false’ branch (when ‘r == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:929:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:958:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:958:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:960:49: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:959:25: call_function: calling ‘amdgpu_gem_va_update_vm’ from ‘amdgpu_gem_va_ioctl’
# 781| fence = dma_fence_get(vm->last_update);
# 782| else
# 783|-> fence = dma_fence_get(bo_va->last_pt_update);
# 784| break;
# 785| case AMDGPU_VA_OP_UNMAP:
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:316:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘cond_exec’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:145:12: branch_false: following ‘false’ branch (when ‘num_ibs != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:149:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:173:20: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:177:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:177:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:183:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:183:12: branch_false: following ‘false’ branch (when ‘vm’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:189:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:200:12: branch_false: following ‘false’ branch (when ‘r == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:205:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:242:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:246:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:301:12: branch_false: following ‘false’ branch (when ‘r == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:308:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c:316:9: danger: use of uninitialized value ‘cond_exec’ here
# 314| ring->funcs->insert_end(ring);
# 315|
# 316|-> amdgpu_ring_patch_cond_exec(ring, cond_exec);
# 317|
# 318| ring->current_ctx = fence_ctx;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_res_cursor.h:161:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_migrate.c:911:1: enter_function: entry to ‘svm_migrate_to_vram’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_migrate.c:916:24: call_function: calling ‘svm_migrate_ram_to_vram’ from ‘svm_migrate_to_vram’
# 159|
# 160| cur->node = ++node;
# 161|-> cur->start = node->start << PAGE_SHIFT;
# 162| cur->size = min(node->size << PAGE_SHIFT, cur->remaining);
# 163| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:313:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 311| struct amdgpu_userq_fence *fence = to_amdgpu_userq_fence(f);
# 312|
# 313|-> return fence->fence_drv->timeline_name;
# 314| }
# 315|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:319:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 317| {
# 318| struct amdgpu_userq_fence *fence = to_amdgpu_userq_fence(f);
# 319|-> struct amdgpu_userq_fence_driver *fence_drv = fence->fence_drv;
# 320| u64 rptr, wptr;
# 321|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:335:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:331:13: enter_function: entry to ‘amdgpu_userq_fence_free’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:334:50: call_function: inlined call to ‘to_amdgpu_userq_fence’ from ‘amdgpu_userq_fence_free’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:335:43: danger: dereference of NULL ‘<unknown>’
# 333| struct dma_fence *fence = container_of(rcu, struct dma_fence, rcu);
# 334| struct amdgpu_userq_fence *userq_fence = to_amdgpu_userq_fence(fence);
# 335|-> struct amdgpu_userq_fence_driver *fence_drv = userq_fence->fence_drv;
# 336|
# 337| /* Release the fence driver reference */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:449:51: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:443:1: enter_function: entry to ‘amdgpu_userq_fence_driver_force_completion’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:447:12: branch_true: following ‘true’ branch (when ‘f’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:448:52: call_function: inlined call to ‘to_amdgpu_userq_fence’ from ‘amdgpu_userq_fence_driver_force_completion’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:449:51: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:449:51: danger: dereference of NULL ‘<unknown>’
# 447| if (f) {
# 448| struct amdgpu_userq_fence *fence = to_amdgpu_userq_fence(f);
# 449|-> struct amdgpu_userq_fence_driver *fence_drv = fence->fence_drv;
# 450| u64 wptr = fence->base.seqno;
# 451|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:313:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘row’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:297:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:297:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:301:26: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:302:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:308:20: branch_false: following ‘false’ branch (when ‘bit_num != 4’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:312:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:312:20: branch_true: following ‘true’ branch (when ‘dump_addr != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:313:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/umc_v12_0.c:313:25: danger: use of uninitialized value ‘row’ here
# 311|
# 312| if (dump_addr)
# 313|-> dev_info(adev->dev,
# 314| "Error Address(PA):0x%-10llx Row:0x%-4x Col:0x%-2x Bank:0x%x Channel:0x%x\n",
# 315| soc_pa, row, col, bank, channel_index);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:1481:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ret’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:2646:12: enter_function: entry to ‘process_termination_nocpsch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:2657:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:2661:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:2664:23: call_function: calling ‘destroy_queue_nocpsch_locked’ from ‘process_termination_nocpsch’
# 1479| }
# 1480|
# 1481|-> return ret;
# 1482| }
# 1483|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3225:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3412:5: enter_function: entry to ‘suspend_queues’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3418:31: call_function: inlined call to ‘get_queue_ids’ from ‘suspend_queues’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3422:13: call_function: inlined call to ‘IS_ERR’ from ‘suspend_queues’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3422:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3422:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c:3426:9: call_function: inlined call to ‘q_array_invalidate’ from ‘suspend_queues’
# 3223|
# 3224| for (i = 0; i < num_queues; i++)
# 3225|-> queue_ids[i] |= KFD_DBG_QUEUE_INVALID_MASK;
# 3226| }
# 3227|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:615:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:603:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:615:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:615:16: danger: use of uninitialized value ‘err’ here
# 613| }
# 614|
# 615|-> return err;
# 616| }
# 617|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:642:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:628:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:642:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:642:16: danger: use of uninitialized value ‘err’ here
# 640| }
# 641|
# 642|-> return err;
# 643| }
# 644|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:841:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:829:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:841:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:841:16: danger: use of uninitialized value ‘err’ here
# 839| }
# 840|
# 841|-> return err;
# 842| }
# 843|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:868:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:855:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:868:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c:868:16: danger: use of uninitialized value ‘err’ here
# 866| }
# 867|
# 868|-> return err;
# 869| }
# 870|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1423:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdd’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1052:13: enter_function: entry to ‘kfd_process_destroy_pdds’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1056:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1057:50: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1093:17: release_memory: using NULL here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1056:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1057:50: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1093:17: release_memory: using NULL here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1056:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1057:50: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1057:44: release_memory: ‘pdd’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process.c:1063:17: call_function: calling ‘kfd_process_device_destroy_cwsr_dgpu’ from ‘kfd_process_destroy_pdds’
# 1421| static void kfd_process_device_destroy_cwsr_dgpu(struct kfd_process_device *pdd)
# 1422| {
# 1423|-> struct kfd_node *dev = pdd->dev;
# 1424| struct qcm_process_device *qpd = &pdd->qpd;
# 1425|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:976:33: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘phyd32clk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:949:6: enter_function: entry to ‘dcn401_enable_stream’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:967:9: call_function: calling ‘dcn401_enable_stream_calc’ from ‘dcn401_enable_stream’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:967:9: return_function: returning to ‘dcn401_enable_stream’ from ‘dcn401_enable_stream_calc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:971:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:972:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:973:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:976:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c:976:33: danger: use of uninitialized value ‘phyd32clk’ here
# 974| dccg->funcs->disable_symclk32_se(dccg, dp_hpo_inst);
# 975| } else {
# 976|-> dccg->funcs->enable_symclk32_se(dccg, dp_hpo_inst, phyd32clk);
# 977| }
# 978| } else {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3416:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clocks.data[i].clocks_in_khz’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3365:12: enter_function: entry to ‘vega20_print_clock_levels’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3402:23: call_function: calling ‘vega20_get_current_clk_freq’ from ‘vega20_print_clock_levels’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3402:23: return_function: returning to ‘vega20_print_clock_levels’ from ‘vega20_get_current_clk_freq’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3403:17: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:21: call_function: calling ‘vega20_get_memclocks’ from ‘vega20_print_clock_levels’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:21: return_function: returning to ‘vega20_print_clock_levels’ from ‘vega20_get_memclocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3413:29: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3416:34: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3416:34: danger: use of uninitialized value ‘clocks.data[i].clocks_in_khz’ here
# 3414| size += sprintf(buf + size, "%d: %uMhz %s\n",
# 3415| i, clocks.data[i].clocks_in_khz / 1000,
# 3416|-> (clocks.data[i].clocks_in_khz == now * 10) ? "*" : "");
# 3417| break;
# 3418|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1439:56: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clk2’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1417:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1420:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1420:12: branch_false: following ‘false’ branch (when ‘curr_clk > 139’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1428:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1431:29: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1432:32: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1434:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1437:28: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1437:28: branch_false: following ‘false’ branch (when ‘curr_clk != clk1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1439:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c:1439:56: danger: use of uninitialized value ‘clk2’ here
# 1437| if (curr_clk == clk1) {
# 1438| level = i;
# 1439|-> } else if (curr_clk >= clk1 && curr_clk < clk2) {
# 1440| level = (curr_clk - clk1) <= (clk2 - curr_clk) ?
# 1441| i :
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:285:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1180:13: enter_function: entry to ‘analogix_dp_bridge_atomic_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1189:16: call_function: calling ‘analogix_dp_get_new_crtc’ from ‘analogix_dp_bridge_atomic_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1189:16: return_function: returning to ‘analogix_dp_bridge_atomic_enable’ from ‘analogix_dp_get_new_crtc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1190:12: branch_false: following ‘false’ branch (when ‘crtc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1193:26: call_function: inlined call to ‘drm_atomic_get_old_crtc_state’ from ‘analogix_dp_bridge_atomic_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1195:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/bridge/analogix/analogix_dp_core.c:1196:23: call_function: calling ‘analogix_dp_disable_psr’ from ‘analogix_dp_bridge_atomic_enable’
# 283|
# 284| for (lane = 0; lane < lane_count; lane++)
# 285|-> buf[lane] = DP_TRAIN_PRE_EMPH_LEVEL_0 |
# 286| DP_TRAIN_VOLTAGE_SWING_LEVEL_0;
# 287|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:140:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 138| enum drm_buddy_free_tree tree;
# 139|
# 140|-> block->header &= ~DRM_BUDDY_HEADER_STATE;
# 141| block->header |= DRM_BUDDY_FREE;
# 142|
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:141:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 139|
# 140| block->header &= ~DRM_BUDDY_HEADER_STATE;
# 141|-> block->header |= DRM_BUDDY_FREE;
# 142|
# 143| tree = get_block_tree(block);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:188:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 186| unsigned int order;
# 187|
# 188|-> while ((parent = block->parent)) {
# 189| struct drm_buddy_block *buddy;
# 190|
Error: GCC_ANALYZER_WARNING (CWE-131):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:634:9: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:627:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:630:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:631:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:634:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_mipi_dbi.c:634:9: danger: allocated ‘tx_buf_size’ bytes and assigned to ‘u16 *’ {{aka ‘short unsigned int *’}} here; ‘sizeof (u16 {{aka short unsigned int}})’ is ‘2’
# 632| return ret;
# 633|
# 634|-> dbidev->tx_buf = devm_kmalloc(drm->dev, tx_buf_size, GFP_KERNEL);
# 635| if (!dbidev->tx_buf)
# 636| return -ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:508:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘limit’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:360:12: enter_function: entry to ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:385:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:388:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:388:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:391:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:416:12: branch_false: following ‘false’ branch (when ‘gma_encoder’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:420:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:423:21: branch_true: following ‘true’ branch (when ‘i <= need_aux’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:424:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:424:17: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:424:17: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:430:21: branch_true: following ‘true’ branch (when ‘i <= need_aux’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:431:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:431:17: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:431:17: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:465:29: branch_true: following ‘true’ branch (when ‘i <= need_aux’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:466:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:466:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:466:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:468:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:468:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:470:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:470:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:472:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:472:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:474:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:474:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:476:25: call_function: calling ‘REGISTER_WRITE_WITH_AUX’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:476:25: return_function: returning to ‘oaktrail_crtc_mode_set’ from ‘REGISTER_WRITE_WITH_AUX’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:500:12: branch_false: following ‘false’ branch (when ‘is_mipi == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:506:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:507:17: call_function: calling ‘mrst_limit’ from ‘oaktrail_crtc_mode_set’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:507:17: return_function: return of NULL to ‘oaktrail_crtc_mode_set’ from ‘mrst_limit’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/oaktrail_crtc.c:508:14: danger: dereference of NULL ‘limit’
# 506| refclk = is_sdvo ? 96000 : dev_priv->core_freq * 1000;
# 507| limit = mrst_limit(crtc, refclk);
# 508|-> ok = limit->find_pll(limit, crtc, adjusted_mode->clock,
# 509| refclk, &clock);
# 510|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/i9xx_wm.c:3424:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/i9xx_wm.c:3468:13: enter_function: entry to ‘ilk_initial_watermarks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/i9xx_wm.c:3471:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/i9xx_wm.c:3473:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘ilk_initial_watermarks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/i9xx_wm.c:3477:9: call_function: calling ‘ilk_program_watermarks’ from ‘ilk_initial_watermarks’
# 3422|
# 3423| /* Compute the currently _active_ config */
# 3424|-> for_each_intel_crtc(display->drm, crtc) {
# 3425| const struct intel_pipe_wm *wm = &crtc->wm.active.ilk;
# 3426|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:972:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1073:13: enter_function: entry to ‘intel_audio_component_put_power’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1076:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1080:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1080:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1081:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1081:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1082:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_audio.c:1082:25: call_function: calling ‘glk_force_audio_cdclk’ from ‘intel_audio_component_put_power’
# 970|
# 971| drm_modeset_acquire_init(&ctx, 0);
# 972|-> state = drm_atomic_state_alloc(display->drm);
# 973| if (drm_WARN_ON(display->drm, !state))
# 974| return;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2580:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2794:1: enter_function: entry to ‘intel_set_cdclk_post_plane_update’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2796:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2798:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2798:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2798:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2803:12: branch_false: following ‘false’ branch (when ‘__mptr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2806:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2806:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2810:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2819:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2821:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:2821:9: call_function: calling ‘intel_set_cdclk’ from ‘intel_set_cdclk_post_plane_update’
# 2578| return;
# 2579|
# 2580|-> if (drm_WARN_ON_ONCE(display->drm, !display->funcs.cdclk->set_cdclk))
# 2581| return;
# 2582|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3554:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3571:6: enter_function: entry to ‘intel_cdclk_crtc_disable_noatomic’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3573:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3575:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3575:9: call_function: calling ‘intel_cdclk_update_hw_state’ from ‘intel_cdclk_crtc_disable_noatomic’
# 3552| cdclk_state->active_pipes = 0;
# 3553|
# 3554|-> for_each_intel_crtc(display->drm, crtc) {
# 3555| const struct intel_crtc_state *crtc_state =
# 3556| to_intel_crtc_state(crtc->base.state);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:1231:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2775:12: enter_function: entry to ‘glk_assign_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2777:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2779:13: call_function: inlined call to ‘glk_use_pre_csc_lut_for_gamma’ from ‘glk_assign_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2783:48: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2782:29: call_function: calling ‘create_resized_lut’ from ‘glk_assign_luts’
# 1229| struct drm_color_lut *lut_out;
# 1230|
# 1231|-> blob_out = drm_property_create_blob(display->drm,
# 1232| sizeof(lut_out[0]) * lut_out_size,
# 1233| NULL);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2182:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2164:1: enter_function: entry to ‘intel_color_add_affected_planes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2167:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2169:17: call_function: inlined call to ‘intel_atomic_get_old_crtc_state’ from ‘intel_color_add_affected_planes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2174:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2175:13: call_function: inlined call to ‘intel_crtc_needs_modeset’ from ‘intel_color_add_affected_planes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2174:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2178:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2182:9: danger: dereference of NULL ‘display’
# 2180| return 0;
# 2181|
# 2182|-> for_each_intel_plane_on_crtc(display->drm, crtc, plane) {
# 2183| struct intel_plane_state *plane_state;
# 2184|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2251:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2240:12: enter_function: entry to ‘check_lut_size’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2243:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2246:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2246:12: branch_false: following ‘false’ branch (when ‘lut’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2249:15: call_function: inlined call to ‘drm_color_lut_size’ from ‘check_lut_size’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2250:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2251:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2251:17: danger: dereference of NULL ‘display’
# 2249| len = drm_color_lut_size(lut);
# 2250| if (len != expected) {
# 2251|-> drm_dbg_kms(display->drm,
# 2252| "[CRTC:%d:%s] Invalid %s LUT size; got %d, expected %d\n",
# 2253| crtc->base.base.id, crtc->base.name, lut_name, len, expected);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2271:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2260:12: enter_function: entry to ‘_check_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2263:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2264:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2270:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2270:39: call_function: inlined call to ‘lut_is_legacy’ from ‘_check_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2271:17: danger: dereference of NULL ‘display’
# 2269| /* C8 relies on its palette being stored in the legacy LUT */
# 2270| if (crtc_state->c8_planes && !lut_is_legacy(crtc_state->hw.gamma_lut)) {
# 2271|-> drm_dbg_kms(display->drm,
# 2272| "[CRTC:%d:%s] C8 pixelformat requires the legacy LUT\n",
# 2273| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2325:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2316:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2317:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2325:17: danger: dereference of NULL ‘display’
# 2323| i9xx_lut_10_diff(b->green, a->green) > 0x7f ||
# 2324| i9xx_lut_10_diff(b->blue, a->blue) > 0x7f) {
# 2325|-> drm_dbg_kms(display->drm,
# 2326| "[CRTC:%d:%s] Last gamma LUT entry exceeds max slope\n",
# 2327| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2340:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2340:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2340:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2340:17: danger: dereference of NULL ‘display’
# 2338| /* make sure {pre,post}_csc_lut were correctly assigned */
# 2339| if (DISPLAY_VER(display) >= 11 || HAS_GMCH(display)) {
# 2340|-> drm_WARN_ON(display->drm,
# 2341| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut);
# 2342| drm_WARN_ON(display->drm,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2342:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2340:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2342:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2342:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2342:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2342:17: danger: dereference of NULL ‘display’
# 2340| drm_WARN_ON(display->drm,
# 2341| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut);
# 2342|-> drm_WARN_ON(display->drm,
# 2343| crtc_state->post_csc_lut != crtc_state->hw.gamma_lut);
# 2344| } else if (DISPLAY_VER(display) == 10) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2345:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2344:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2345:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2345:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2345:17: danger: dereference of NULL ‘display’
# 2343| crtc_state->post_csc_lut != crtc_state->hw.gamma_lut);
# 2344| } else if (DISPLAY_VER(display) == 10) {
# 2345|-> drm_WARN_ON(display->drm,
# 2346| crtc_state->post_csc_lut == crtc_state->hw.gamma_lut &&
# 2347| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2334:6: enter_function: entry to ‘intel_color_assert_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2344:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2345:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: call_function: calling ‘ilk_lut_limited_range’ from ‘intel_color_assert_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: return_function: returning to ‘intel_color_assert_luts’ from ‘ilk_lut_limited_range’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2349:17: danger: dereference of NULL ‘display’
# 2347| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut &&
# 2348| crtc_state->pre_csc_lut != display->color.glk_linear_degamma_lut);
# 2349|-> drm_WARN_ON(display->drm,
# 2350| !ilk_lut_limited_range(crtc_state) &&
# 2351| crtc_state->post_csc_lut != NULL &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2354:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2344:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2353:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2353:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2354:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2354:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2354:17: danger: dereference of NULL ‘display’
# 2352| crtc_state->post_csc_lut != crtc_state->hw.gamma_lut);
# 2353| } else if (crtc_state->gamma_mode != GAMMA_MODE_MODE_SPLIT) {
# 2354|-> drm_WARN_ON(display->drm,
# 2355| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut &&
# 2356| crtc_state->pre_csc_lut != crtc_state->hw.gamma_lut);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2334:6: enter_function: entry to ‘intel_color_assert_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2336:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2339:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2344:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2353:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2353:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2354:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: call_function: calling ‘ilk_lut_limited_range’ from ‘intel_color_assert_luts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: return_function: returning to ‘intel_color_assert_luts’ from ‘ilk_lut_limited_range’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2357:17: danger: dereference of NULL ‘display’
# 2355| crtc_state->pre_csc_lut != crtc_state->hw.degamma_lut &&
# 2356| crtc_state->pre_csc_lut != crtc_state->hw.gamma_lut);
# 2357|-> drm_WARN_ON(display->drm,
# 2358| !ilk_lut_limited_range(crtc_state) &&
# 2359| crtc_state->post_csc_lut != crtc_state->hw.degamma_lut &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2671:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2674:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2674:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: danger: dereference of NULL ‘display’
# 2675| return ilk_assign_luts(crtc_state);
# 2676|
# 2677|-> drm_WARN_ON(display->drm, drm_color_lut_size(crtc_state->hw.degamma_lut) != 1024);
# 2678| drm_WARN_ON(display->drm, drm_color_lut_size(crtc_state->hw.gamma_lut) != 1024);
# 2679|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2678:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2671:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2674:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2674:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2677:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2678:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2678:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2678:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:2678:9: danger: dereference of NULL ‘display’
# 2676|
# 2677| drm_WARN_ON(display->drm, drm_color_lut_size(crtc_state->hw.degamma_lut) != 1024);
# 2678|-> drm_WARN_ON(display->drm, drm_color_lut_size(crtc_state->hw.gamma_lut) != 1024);
# 2679|
# 2680| degamma_lut = create_resized_lut(display, crtc_state->hw.degamma_lut, 512,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:3792:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:3786:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:3787:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_color.c:3792:16: danger: dereference of NULL ‘display’
# 3790| struct drm_color_lut *lut;
# 3791|
# 3792|-> blob = drm_property_create_blob(display->drm,
# 3793| sizeof(lut[0]) * lut_size,
# 3794| NULL);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:334:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘primary’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:312:5: enter_function: entry to ‘intel_crtc_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:319:16: call_function: calling ‘intel_crtc_alloc’ from ‘intel_crtc_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:319:16: return_function: returning to ‘intel_crtc_init’ from ‘intel_crtc_alloc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:320:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:323:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:326:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:334:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:334:33: danger: dereference of NULL ‘primary’
# 332| goto fail;
# 333| }
# 334|-> crtc->plane_ids_mask |= BIT(primary->id);
# 335|
# 336| intel_init_fifo_underrun_reporting(display, crtc, false);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:349:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘plane’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:312:5: enter_function: entry to ‘intel_crtc_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:319:16: call_function: calling ‘intel_crtc_alloc’ from ‘intel_crtc_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:319:16: return_function: returning to ‘intel_crtc_init’ from ‘intel_crtc_alloc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:320:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:323:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:326:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:327:27: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:330:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:334:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:338:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:341:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_crtc.c:349:41: danger: dereference of NULL ‘plane’
# 347| goto fail;
# 348| }
# 349|-> crtc->plane_ids_mask |= BIT(plane->id);
# 350| }
# 351|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:63:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:58:12: enter_function: entry to ‘intel_display_caps’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:60:41: call_function: calling ‘node_to_intel_display’ from ‘intel_display_caps’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:60:41: return_function: return of NULL to ‘intel_display_caps’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:63:42: danger: dereference of NULL ‘display’
# 61| struct drm_printer p = drm_seq_file_printer(m);
# 62|
# 63|-> drm_printf(&p, "PCH type: %d\n", INTEL_PCH_TYPE(display));
# 64|
# 65| intel_display_device_info_print(DISPLAY_INFO(display),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:96:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:86:12: enter_function: entry to ‘i915_sr_status’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:88:41: call_function: calling ‘node_to_intel_display’ from ‘i915_sr_status’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:88:41: return_function: return of NULL to ‘i915_sr_status’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:94:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:96:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:96:18: danger: dereference of NULL ‘display’
# 94| if (DISPLAY_VER(display) >= 9)
# 95| /* no global SR status; inspect per-plane WM */;
# 96|-> else if (HAS_PCH_SPLIT(display))
# 97| sr_enabled = intel_de_read(display, WM1_LP_ILK) & WM_LP_ENABLE;
# 98| else if (display->platform.i965gm || display->platform.g4x ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:134:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:115:12: enter_function: entry to ‘i915_gem_framebuffer_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:117:41: call_function: calling ‘node_to_intel_display’ from ‘i915_gem_framebuffer_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:117:41: return_function: return of NULL to ‘i915_gem_framebuffer_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:134:9: danger: dereference of NULL ‘display’
# 132| }
# 133|
# 134|-> mutex_lock(&display->drm->mode_config.fb_lock);
# 135| drm_for_each_fb(drm_fb, display->drm) {
# 136| struct intel_framebuffer *fb = to_intel_framebuffer(drm_fb);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:186:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:175:13: enter_function: entry to ‘intel_encoder_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:179:41: call_function: calling ‘node_to_intel_display’ from ‘intel_encoder_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:179:41: return_function: return of NULL to ‘intel_encoder_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:186:9: danger: dereference of NULL ‘display’
# 184| encoder->base.base.id, encoder->base.name);
# 185|
# 186|-> drm_connector_list_iter_begin(display->drm, &conn_iter);
# 187| drm_for_each_connector_iter(connector, &conn_iter) {
# 188| const struct drm_connector_state *conn_state =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:401:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:396:13: enter_function: entry to ‘intel_plane_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:398:41: call_function: calling ‘node_to_intel_display’ from ‘intel_plane_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:398:41: return_function: return of NULL to ‘intel_plane_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:401:9: danger: dereference of NULL ‘display’
# 399| struct intel_plane *plane;
# 400|
# 401|-> for_each_intel_plane_on_crtc(display->drm, crtc, plane) {
# 402| seq_printf(m, "\t[PLANE:%d:%s]: type=%s\n",
# 403| plane->base.base.id, plane->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:580:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:542:13: enter_function: entry to ‘intel_crtc_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:544:41: call_function: calling ‘node_to_intel_display’ from ‘intel_crtc_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:544:41: return_function: return of NULL to ‘intel_crtc_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:580:9: danger: dereference of NULL ‘display’
# 578| intel_vdsc_state_dump(&p, 1, crtc_state);
# 579|
# 580|-> for_each_intel_encoder_mask(display->drm, encoder,
# 581| crtc_state->uapi.encoder_mask)
# 582| intel_encoder_info(m, crtc, encoder);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:603:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:593:12: enter_function: entry to ‘i915_display_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:595:41: call_function: calling ‘node_to_intel_display’ from ‘i915_display_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:595:41: return_function: return of NULL to ‘i915_display_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:603:9: danger: dereference of NULL ‘display’
# 601| wakeref = intel_display_rpm_get(display);
# 602|
# 603|-> drm_modeset_lock_all(display->drm);
# 604|
# 605| seq_printf(m, "CRTC info\n");
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:632:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:625:12: enter_function: entry to ‘i915_shared_dplls_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:627:41: call_function: calling ‘node_to_intel_display’ from ‘i915_shared_dplls_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:627:41: return_function: return of NULL to ‘i915_shared_dplls_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:632:9: danger: dereference of NULL ‘display’
# 630| int i;
# 631|
# 632|-> drm_modeset_lock_all(display->drm);
# 633|
# 634| drm_printf(&p, "PLL refclks: non-SSC: %d kHz, SSC: %d kHz\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:661:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:652:12: enter_function: entry to ‘i915_ddb_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:654:41: call_function: calling ‘node_to_intel_display’ from ‘i915_ddb_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:654:41: return_function: return of NULL to ‘i915_ddb_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:658:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:661:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:661:9: danger: dereference of NULL ‘display’
# 659| return -ENODEV;
# 660|
# 661|-> drm_modeset_lock_all(display->drm);
# 662|
# 663| seq_printf(m, "%-15s%8s%8s%8s\n", "", "Start", "End", "Size");
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:732:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:724:12: enter_function: entry to ‘i915_dp_mst_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:726:41: call_function: calling ‘node_to_intel_display’ from ‘i915_dp_mst_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:726:41: return_function: return of NULL to ‘i915_dp_mst_info’ from ‘node_to_intel_display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:732:9: danger: dereference of NULL ‘display’
# 730| struct drm_connector_list_iter conn_iter;
# 731|
# 732|-> drm_connector_list_iter_begin(display->drm, &conn_iter);
# 733| drm_for_each_connector_iter(connector, &conn_iter) {
# 734| if (connector->connector_type != DRM_MODE_CONNECTOR_DisplayPort)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:905:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:893:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:896:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_debugfs.c:905:41: danger: dereference of NULL ‘display’
# 903| do {
# 904| try_again = false;
# 905|-> ret = drm_modeset_lock(&display->drm->mode_config.connection_mutex,
# 906| &ctx);
# 907| if (ret) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:138:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1717:6: enter_function: entry to ‘ilk_disable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1719:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1720:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1726:9: call_function: inlined call to ‘ilk_disable_display_irq’ from ‘ilk_disable_vblank’
# 136| u32 interrupt_mask, u32 enabled_irq_mask)
# 137| {
# 138|-> struct drm_i915_private *dev_priv = to_i915(display->drm);
# 139| u32 new_val;
# 140|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:209:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1788:6: enter_function: entry to ‘bdw_disable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1791:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1792:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1795:13: call_function: calling ‘gen11_dsi_configure_te’ from ‘bdw_disable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1795:13: return_function: returning to ‘bdw_disable_vblank’ from ‘gen11_dsi_configure_te’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1795:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1798:9: call_function: inlined call to ‘spinlock_check’ from ‘bdw_disable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1799:9: call_function: inlined call to ‘bdw_disable_pipe_irq’ from ‘bdw_disable_vblank’
# 207| u32 enabled_irq_mask)
# 208| {
# 209|-> struct drm_i915_private *dev_priv = to_i915(display->drm);
# 210| u32 new_val;
# 211|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:326:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1670:5: enter_function: entry to ‘i965_enable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1672:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1673:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1677:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’
# 324| enum pipe pipe, u32 status_mask)
# 325| {
# 326|-> struct drm_i915_private *dev_priv = to_i915(display->drm);
# 327| i915_reg_t reg = PIPESTAT(display, pipe);
# 328| u32 enable_mask;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:350:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1684:6: enter_function: entry to ‘i965_disable_vblank’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1686:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1687:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:9: call_function: calling ‘i915_disable_pipestat’ from ‘i965_disable_vblank’
# 348| enum pipe pipe, u32 status_mask)
# 349| {
# 350|-> struct drm_i915_private *dev_priv = to_i915(display->drm);
# 351| i915_reg_t reg = PIPESTAT(display, pipe);
# 352| u32 enable_mask;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1130:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1128:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1130:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1130:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1130:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1130:9: danger: dereference of NULL ‘display’
# 1128| struct intel_display *display = to_intel_display(crtc);
# 1129|
# 1130|-> drm_err_ratelimited(display->drm,
# 1131| "[CRTC:%d:%s] PLANE ATS fault\n",
# 1132| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1141:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1139:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1141:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1141:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1141:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1141:9: danger: dereference of NULL ‘display’
# 1139| struct intel_display *display = to_intel_display(crtc);
# 1140|
# 1141|-> drm_err_ratelimited(display->drm,
# 1142| "[CRTC:%d:%s] PIPEDMC ATS fault\n",
# 1143| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1152:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1150:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1152:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1152:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1152:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1152:9: danger: dereference of NULL ‘display’
# 1150| struct intel_display *display = to_intel_display(crtc);
# 1151|
# 1152|-> drm_err_ratelimited(display->drm,
# 1153| "[CRTC:%d:%s] PIPEDMC fault\n",
# 1154| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: enter_function: entry to ‘do_trace_event_raw_event_intel_pipe_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘do_trace_event_raw_event_intel_pipe_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: call_function: inlined call to ‘fortify_memset_chk’ from ‘do_trace_event_raw_event_intel_pipe_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: call_function: inlined call to ‘fortify_memset_chk’ from ‘do_trace_event_raw_event_intel_pipe_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:69:1: danger: dereference of NULL ‘display’
# 67| static_assert(PIPE_A == _TRACE_PIPE_A);
# 68|
# 69|-> TRACE_EVENT(intel_pipe_enable,
# 70| TP_PROTO(struct intel_crtc *crtc),
# 71| TP_ARGS(crtc),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: enter_function: entry to ‘do_trace_event_raw_event_intel_pipe_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘do_trace_event_raw_event_intel_pipe_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: call_function: inlined call to ‘fortify_memset_chk’ from ‘do_trace_event_raw_event_intel_pipe_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: call_function: inlined call to ‘fortify_memset_chk’ from ‘do_trace_event_raw_event_intel_pipe_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_trace.h:98:1: danger: dereference of NULL ‘display’
# 96| );
# 97|
# 98|-> TRACE_EVENT(intel_pipe_disable,
# 99| TP_PROTO(struct intel_crtc *crtc),
# 100| TP_ARGS(crtc),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:617:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:601:1: enter_function: entry to ‘intel_dp_aux_supports_vesa_backlight’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:603:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:604:37: call_function: inlined call to ‘intel_attached_dp’ from ‘intel_dp_aux_supports_vesa_backlight’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:616:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:617:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_aux_backlight.c:617:17: danger: dereference of NULL ‘display’
# 615|
# 616| if (drm_edp_backlight_supported(intel_dp->edp_dpcd)) {
# 617|-> drm_dbg_kms(display->drm,
# 618| "[CONNECTOR:%d:%s] AUX Backlight Control Supported!\n",
# 619| connector->base.base.id, connector->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:193:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:186:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:188:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:192:12: branch_true: following ‘true’ branch (when ‘ret != 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:193:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:193:17: danger: dereference of NULL ‘display’
# 191| &bstatus, 1);
# 192| if (ret != 1) {
# 193|-> drm_dbg_kms(display->drm,
# 194| "Read bstatus from DP/AUX failed (%zd)\n", ret);
# 195| return ret >= 0 ? -EIO : ret;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:217:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:205:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:210:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:210:21: branch_true: following ‘true’ branch (when ‘i < num_downstream’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:211:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:216:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:217:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:217:25: danger: dereference of NULL ‘display’
# 215| len);
# 216| if (ret != len) {
# 217|-> drm_dbg_kms(display->drm,
# 218| "Read ksv[%d] from DP/AUX failed (%zd)\n",
# 219| i, ret);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:240:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:230:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:233:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:233:12: branch_false: following ‘false’ branch (when ‘i <= 4’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:237:32: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:239:12: branch_true: following ‘true’ branch (when ‘ret != 4’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:240:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:240:17: danger: dereference of NULL ‘display’
# 238| DRM_HDCP_V_PRIME_PART_LEN);
# 239| if (ret != DRM_HDCP_V_PRIME_PART_LEN) {
# 240|-> drm_dbg_kms(display->drm,
# 241| "Read v'[%d] from DP/AUX failed (%zd)\n", i, ret);
# 242| return ret >= 0 ? -EIO : ret;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:267:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:260:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:262:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:266:12: branch_true: following ‘true’ branch (when ‘ret != 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:267:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:267:17: danger: dereference of NULL ‘display’
# 265| &bstatus, 1);
# 266| if (ret != 1) {
# 267|-> drm_dbg_kms(display->drm,
# 268| "Read bstatus from DP/AUX failed (%zd)\n", ret);
# 269| return false;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:355:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:346:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:347:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:354:12: branch_true: following ‘true’ branch (when ‘ret != 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:355:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:355:17: danger: dereference of NULL ‘display’
# 353| HDCP_2_2_DP_RXSTATUS_LEN);
# 354| if (ret != HDCP_2_2_DP_RXSTATUS_LEN) {
# 355|-> drm_dbg_kms(display->drm,
# 356| "Read bstatus from DP/AUX failed (%zd)\n", ret);
# 357| return ret >= 0 ? -EIO : ret;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:404:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:398:1: enter_function: entry to ‘intel_dp_hdcp2_wait_for_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:401:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:402:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:402:47: call_function: calling ‘intel_attached_dig_port’ from ‘intel_dp_hdcp2_wait_for_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:402:47: return_function: return of NULL to ‘intel_dp_hdcp2_wait_for_msg’ from ‘intel_attached_dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:404:36: danger: dereference of NULL ‘dig_port’
# 402| struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
# 403| struct intel_dp *dp = &dig_port->dp;
# 404|-> struct intel_hdcp *hdcp = &dp->attached_connector->hdcp;
# 405| u8 msg_id = hdcp2_msg_data->msg_id;
# 406| int ret, timeout;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:522:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:515:5: enter_function: entry to ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:518:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:519:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:519:47: call_function: calling ‘intel_attached_dig_port’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:519:47: return_function: return of NULL to ‘intel_dp_hdcp2_read_msg’ from ‘intel_attached_dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:522:36: danger: dereference of NULL ‘dig_port’
# 520| struct drm_dp_aux *aux = &dig_port->dp.aux;
# 521| struct intel_dp *dp = &dig_port->dp;
# 522|-> struct intel_hdcp *hdcp = &dp->attached_connector->hdcp;
# 523| unsigned int offset;
# 524| u8 *byte = buf;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:572:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:515:5: enter_function: entry to ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:518:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:519:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:531:26: call_function: inlined call to ‘get_hdcp2_dp_msg_data’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:536:15: call_function: calling ‘intel_dp_hdcp2_wait_for_msg’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:536:15: return_function: returning to ‘intel_dp_hdcp2_read_msg’ from ‘intel_dp_hdcp2_wait_for_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:537:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:540:49: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:545:12: branch_false: following ‘false’ branch (when ‘msg_id != 12’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:557:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:559:16: branch_true: following ‘true’ branch (when ‘bytes_to_recv != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:560:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:564:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:564:50: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:564:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:569:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:572:25: danger: dereference of NULL ‘display’
# 570| (void *)byte, len);
# 571| if (ret < 0) {
# 572|-> drm_dbg_kms(display->drm, "msg_id %d, ret %zd\n",
# 573| msg_id, ret);
# 574| return ret;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:585:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:515:5: enter_function: entry to ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:518:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:519:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:531:26: call_function: inlined call to ‘get_hdcp2_dp_msg_data’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:536:15: call_function: calling ‘intel_dp_hdcp2_wait_for_msg’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:536:15: return_function: returning to ‘intel_dp_hdcp2_read_msg’ from ‘intel_dp_hdcp2_wait_for_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:537:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:540:49: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:582:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:583:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:583:31: call_function: inlined call to ‘ktime_after’ from ‘intel_dp_hdcp2_read_msg’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:585:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:585:25: danger: dereference of NULL ‘display’
# 583| msg_expired = ktime_after(ktime_get_raw(), msg_end);
# 584| if (msg_expired) {
# 585|-> drm_dbg_kms(display->drm,
# 586| "msg_id %d, entire msg read timeout(mSec): %d\n",
# 587| msg_id, hdcp2_msg_data->msg_read_timeout);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:714:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:697:5: enter_function: entry to ‘intel_dp_hdcp_get_remote_capability’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:701:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:703:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:708:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:711:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:712:16: call_function: calling ‘_intel_dp_hdcp2_get_capability’ from ‘intel_dp_hdcp_get_remote_capability’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:712:16: return_function: returning to ‘intel_dp_hdcp_get_remote_capability’ from ‘_intel_dp_hdcp2_get_capability’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:713:12: branch_true: following ‘true’ branch (when ‘ret != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:714:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:714:17: danger: dereference of NULL ‘display’
# 712| ret = _intel_dp_hdcp2_get_capability(aux, hdcp2_capable);
# 713| if (ret)
# 714|-> drm_dbg_kms(display->drm,
# 715| "HDCP2 DPCD capability read failed err: %d\n", ret);
# 716|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:759:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:750:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:751:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:758:12: branch_true: following ‘true’ branch (when ‘ret != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:759:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:759:17: danger: dereference of NULL ‘display’
# 757| TRANS_DDI_HDCP_SELECT);
# 758| if (ret)
# 759|-> drm_err(display->drm, "%s HDCP stream select failed (%d)\n",
# 760| enable ? "Enable" : "Disable", ret);
# 761| return ret;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:815:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:797:1: enter_function: entry to ‘intel_dp_mst_hdcp2_stream_encryption’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:800:41: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:800:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:801:47: call_function: calling ‘intel_attached_dig_port’ from ‘intel_dp_mst_hdcp2_stream_encryption’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:801:47: return_function: return of NULL to ‘intel_dp_mst_hdcp2_stream_encryption’ from ‘intel_attached_dig_port’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:811:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:812:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:815:17: branch_true: following ‘true’ branch (when ‘enable != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:815:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_hdcp.c:815:17: danger: dereference of NULL ‘dig_port’
# 813| HDCP2_AUTH_STREAM(display, cpu_transcoder, port));
# 814| stream_type = REG_FIELD_GET(AUTH_STREAM_TYPE_MASK, val);
# 815|-> drm_WARN_ON(display->drm, enable &&
# 816| stream_type != data->streams[0].stream_type);
# 817| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:122:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1043:13: enter_function: entry to ‘mst_stream_post_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1048:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1050:49: call_function: inlined call to ‘to_primary_encoder’ from ‘mst_stream_post_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1066:27: call_function: calling ‘intel_dp_mst_dec_active_streams’ from ‘mst_stream_post_disable’
# 120| struct intel_display *display = to_intel_display(intel_dp);
# 121|
# 122|-> drm_dbg_kms(display->drm, "active MST streams %d -> %d\n",
# 123| intel_dp->mst.active_streams, intel_dp->mst.active_streams - 1);
# 124|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:135:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1200:13: enter_function: entry to ‘mst_stream_pre_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1205:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1207:49: call_function: inlined call to ‘to_primary_encoder’ from ‘mst_stream_pre_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1222:28: call_function: calling ‘intel_dp_mst_inc_active_streams’ from ‘mst_stream_pre_enable’
# 133| struct intel_display *display = to_intel_display(intel_dp);
# 134|
# 135|-> drm_dbg_kms(display->drm, "active MST streams %d -> %d\n",
# 136| intel_dp->mst.active_streams, intel_dp->mst.active_streams + 1);
# 137|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:275:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:257:5: enter_function: entry to ‘intel_dp_mtp_tu_compute_config’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:262:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:263:34: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:275:9: branch_false: following ‘false’ branch (when ‘dsc == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:275:9: call_function: inlined call to ‘fxp_q4_to_frac’ from ‘intel_dp_mtp_tu_compute_config’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:275:9: danger: dereference of NULL ‘display’
# 273|
# 274| /* shouldn't happen, sanity check */
# 275|-> drm_WARN_ON(display->drm, !dsc && (fxp_q4_to_frac(min_bpp_x16) ||
# 276| fxp_q4_to_frac(max_bpp_x16) ||
# 277| fxp_q4_to_frac(bpp_step_x16)));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:281:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:262:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:263:34: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:279:12: branch_true: following ‘true’ branch (when ‘bpp_step_x16 == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:281:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:281:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:281:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:281:17: danger: dereference of NULL ‘display’
# 279| if (!bpp_step_x16) {
# 280| /* Allow using zero step only to indicate single try for a given bpp. */
# 281|-> drm_WARN_ON(display->drm, min_bpp_x16 != max_bpp_x16);
# 282| bpp_step_x16 = 1;
# 283| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:320:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:257:5: enter_function: entry to ‘intel_dp_mtp_tu_compute_config’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:262:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:263:34: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:285:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:301:34: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:314:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:320:9: call_function: inlined call to ‘fxp_q4_to_frac’ from ‘intel_dp_mtp_tu_compute_config’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:320:9: danger: dereference of NULL ‘display’
# 318| }
# 319|
# 320|-> drm_dbg_kms(display->drm, "Looking for slots in range min bpp " FXP_Q4_FMT " max bpp " FXP_Q4_FMT "\n",
# 321| FXP_Q4_ARGS(min_bpp_x16), FXP_Q4_ARGS(max_bpp_x16));
# 322|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:488:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:474:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:475:45: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:488:9: danger: dereference of NULL ‘display’
# 486| dsc_bpc);
# 487|
# 488|-> drm_dbg_kms(display->drm, "DSC Source supported min bpp %d max bpp %d\n",
# 489| min_bpp, max_bpp);
# 490|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:696:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:648:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:649:44: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:665:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:670:54: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:695:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:696:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:696:17: danger: dereference of NULL ‘display’
# 694|
# 695| if (dsc_needed && !intel_dp_supports_dsc(intel_dp, connector, pipe_config)) {
# 696|-> drm_dbg_kms(display->drm, "DSC required but not available\n");
# 697| return -EINVAL;
# 698| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:702:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:648:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:649:44: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:665:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:670:54: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:695:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:702:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:702:17: danger: dereference of NULL ‘display’
# 700| /* enable compression if the mode doesn't fit available BW */
# 701| if (dsc_needed) {
# 702|-> drm_dbg_kms(display->drm, "Try DSC (fallback=%s, joiner=%s, force=%s)\n",
# 703| str_yes_no(ret), str_yes_no(joiner_needs_dsc),
# 704| str_yes_no(intel_dp->force_dsc_en));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:836:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:828:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:834:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:836:9: danger: dereference of NULL ‘display’
# 834| mst_pipe_mask = get_pipes_downstream_of_mst_port(state, mst_mgr, NULL);
# 835|
# 836|-> for_each_intel_crtc_in_pipe_mask(display->drm, crtc, mst_pipe_mask) {
# 837| struct intel_crtc_state *crtc_state =
# 838| intel_atomic_get_new_crtc_state(state, crtc);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:959:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:951:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:952:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:956:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:959:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:959:9: danger: dereference of NULL ‘display’
# 957| return 0;
# 958|
# 959|-> drm_connector_list_iter_begin(display->drm, &connector_list_iter);
# 960| for_each_intel_connector_iter(connector_iter, &connector_list_iter) {
# 961| struct intel_digital_connector_state *conn_iter_state;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1068:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1043:13: enter_function: entry to ‘mst_stream_post_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1048:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1050:49: call_function: inlined call to ‘to_primary_encoder’ from ‘mst_stream_post_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1066:27: call_function: calling ‘intel_dp_mst_dec_active_streams’ from ‘mst_stream_post_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1066:27: return_function: returning to ‘mst_stream_post_disable’ from ‘intel_dp_mst_dec_active_streams’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1068:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1068:9: danger: dereference of NULL ‘display’
# 1066| last_mst_stream = intel_dp_mst_dec_active_streams(intel_dp);
# 1067|
# 1068|-> drm_WARN_ON(display->drm, DISPLAY_VER(display) >= 12 && last_mst_stream &&
# 1069| !intel_dp_mst_is_master_trans(old_crtc_state));
# 1070|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1223:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1200:13: enter_function: entry to ‘mst_stream_pre_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1205:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1207:49: call_function: inlined call to ‘to_primary_encoder’ from ‘mst_stream_pre_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1222:28: call_function: calling ‘intel_dp_mst_inc_active_streams’ from ‘mst_stream_pre_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1222:28: return_function: returning to ‘mst_stream_pre_enable’ from ‘intel_dp_mst_inc_active_streams’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1223:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1223:9: danger: dereference of NULL ‘display’
# 1221|
# 1222| first_mst_stream = intel_dp_mst_inc_active_streams(intel_dp);
# 1223|-> drm_WARN_ON(display->drm, DISPLAY_VER(display) >= 12 && first_mst_stream &&
# 1224| !intel_dp_mst_is_master_trans(pipe_config));
# 1225|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1271:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1264:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1268:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1268:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1271:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1271:14: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1271:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1271:14: danger: dereference of NULL ‘display’
# 1269| return;
# 1270|
# 1271|-> if (!IS_DISPLAY_STEP(display, STEP_D0, STEP_FOREVER))
# 1272| return;
# 1273|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1311:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1295:13: enter_function: entry to ‘mst_stream_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1300:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1301:49: call_function: inlined call to ‘to_primary_encoder’ from ‘mst_stream_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1311:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1311:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1311:9: danger: dereference of NULL ‘display’
# 1309| int ret, i;
# 1310|
# 1311|-> drm_WARN_ON(display->drm, pipe_config->has_pch_encoder);
# 1312|
# 1313| if (intel_dp_is_uhbr(pipe_config)) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1579:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1572:1: enter_function: entry to ‘mst_connector_atomic_best_encoder’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1577:17: call_function: inlined call to ‘drm_atomic_get_new_connector_state’ from ‘mst_connector_atomic_best_encoder’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1578:26: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1579:35: danger: dereference of NULL ‘<unknown>’
# 1577| drm_atomic_get_new_connector_state(state, &connector->base);
# 1578| struct intel_dp *intel_dp = connector->mst.dp;
# 1579|-> struct intel_crtc *crtc = to_intel_crtc(connector_state->crtc);
# 1580|
# 1581| return &intel_dp->mst.stream_encoders[crtc->pipe]->base.base;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1647:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1643:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1647:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1647:36: danger: dereference of NULL ‘display’
# 1645|
# 1646| drm_object_attach_property(&connector->base.base,
# 1647|-> display->drm->mode_config.path_property, 0);
# 1648| drm_object_attach_property(&connector->base.base,
# 1649| display->drm->mode_config.tile_property, 0);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1728:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1688:13: enter_function: entry to ‘detect_dsc_hblank_expansion_quirk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1690:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1691:28: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1695:12: branch_false: following ‘false’ branch (when ‘aux’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1702:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1708:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1711:13: call_function: inlined call to ‘drm_dp_is_branch’ from ‘detect_dsc_hblank_expansion_quirk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1711:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1714:14: call_function: inlined call to ‘drm_dp_has_quirk’ from ‘detect_dsc_hblank_expansion_quirk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1714:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1724:14: call_function: inlined call to ‘drm_dp_128b132b_supported’ from ‘detect_dsc_hblank_expansion_quirk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1728:9: danger: dereference of NULL ‘display’
# 1726| return false;
# 1727|
# 1728|-> drm_dbg_kms(display->drm,
# 1729| "[CONNECTOR:%d:%s] DSC HBLANK expansion quirk detected\n",
# 1730| connector->base.base.id, connector->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1757:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1736:1: enter_function: entry to ‘mst_topology_add_connector’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1741:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1742:47: call_function: inlined call to ‘dp_to_dig_port’ from ‘mst_topology_add_connector’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1748:12: branch_false: following ‘false’ branch (when ‘connector’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1751:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1757:15: danger: dereference of NULL ‘display’
# 1755| drm_dp_mst_get_port_malloc(port);
# 1756|
# 1757|-> ret = drm_connector_dynamic_init(display->drm, &connector->base, &mst_connector_funcs,
# 1758| DRM_MODE_CONNECTOR_DisplayPort, NULL);
# 1759| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1829:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1815:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1820:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1822:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1825:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1829:9: danger: dereference of NULL ‘display’
# 1827| intel_mst->primary = dig_port;
# 1828|
# 1829|-> drm_encoder_init(display->drm, &encoder->base, &mst_stream_encoder_funcs,
# 1830| DRM_MODE_ENCODER_DPMST, "DP-MST %c", pipe_name(pipe));
# 1831|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1899:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1879:1: enter_function: entry to ‘intel_dp_mst_encoder_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1881:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1882:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1886:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1898:9: call_function: calling ‘mst_stream_encoders_create’ from ‘intel_dp_mst_encoder_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1898:9: return_function: returning to ‘intel_dp_mst_encoder_init’ from ‘mst_stream_encoders_create’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1899:15: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1901:44: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:1899:15: danger: dereference of NULL ‘display’
# 1897| /* create encoders */
# 1898| mst_stream_encoders_create(dig_port);
# 1899|-> ret = drm_dp_mst_topology_mgr_init(&intel_dp->mst.mgr, display->drm,
# 1900| &intel_dp->aux, 16,
# 1901| INTEL_NUM_PIPES(display), conn_base_id);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2147:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2133:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2134:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2140:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2143:15: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_mst.c:2147:17: danger: dereference of NULL ‘display’
# 2145| /* Adjust the expected register value for SST + SideBand. */
# 2146| if (ret < 0 || val != (DP_MST_EN | DP_UP_REQ_EN | DP_UPSTREAM_IS_SRC)) {
# 2147|-> drm_dbg_kms(display->drm,
# 2148| "[CONNECTOR:%d:%s][ENCODER:%d:%s] MST mode got reset, removing topology (ret=%d, ctrl=0x%02x)\n",
# 2149| connector->base.base.id, connector->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:45:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:35:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:38:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:38:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:39:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:45:17: danger: dereference of NULL ‘display’
# 43| pipe_config->dither_force_disable = bpp == 6 * 3;
# 44|
# 45|-> drm_dbg_kms(display->drm, "Setting pipe_bpp to %d\n", bpp);
# 46| }
# 47|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:89:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:77:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:80:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:88:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:89:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:89:17: danger: dereference of NULL ‘display’
# 87|
# 88| if (status <= 0) {
# 89|-> drm_dbg_kms(display->drm, "Lane count read failed\n");
# 90| return DP_TEST_NAK;
# 91| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:97:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:77:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:80:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:88:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:92:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:96:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:97:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:97:17: danger: dereference of NULL ‘display’
# 95| &test_link_bw);
# 96| if (status <= 0) {
# 97|-> drm_dbg_kms(display->drm, "Link Rate read failed\n");
# 98| return DP_TEST_NAK;
# 99| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:125:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:115:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:116:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:124:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:125:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:125:17: danger: dereference of NULL ‘display’
# 123| &test_pattern);
# 124| if (status <= 0) {
# 125|-> drm_dbg_kms(display->drm, "Test pattern read failed\n");
# 126| return DP_TEST_NAK;
# 127| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:134:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:115:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:116:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:124:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:131:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:133:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:134:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:134:17: danger: dereference of NULL ‘display’
# 132| &h_width, 2);
# 133| if (status <= 0) {
# 134|-> drm_dbg_kms(display->drm, "H Width read failed\n");
# 135| return DP_TEST_NAK;
# 136| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:141:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:115:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:116:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:124:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:131:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:133:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:138:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:140:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:141:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:141:17: danger: dereference of NULL ‘display’
# 139| &v_height, 2);
# 140| if (status <= 0) {
# 141|-> drm_dbg_kms(display->drm, "V Height read failed\n");
# 142| return DP_TEST_NAK;
# 143| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:148:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:113:11: enter_function: entry to ‘intel_dp_autotest_video_pattern’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:115:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:116:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:124:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:128:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:131:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:133:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:138:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:140:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:145:18: call_function: inlined call to ‘drm_dp_dpcd_readb’ from ‘intel_dp_autotest_video_pattern’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:147:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:148:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:148:17: danger: dereference of NULL ‘display’
# 146| &test_misc);
# 147| if (status <= 0) {
# 148|-> drm_dbg_kms(display->drm, "TEST MISC read failed\n");
# 149| return DP_TEST_NAK;
# 150| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:193:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:177:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:179:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:193:25: danger: dereference of NULL ‘display’
# 191| if (intel_dp->aux.i2c_nack_count > 0 ||
# 192| intel_dp->aux.i2c_defer_count > 0)
# 193|-> drm_dbg_kms(display->drm,
# 194| "EDID read had %d NACKs, %d DEFERs\n",
# 195| intel_dp->aux.i2c_nack_count,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:207:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:177:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:179:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:182:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:205:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:207:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:207:25: danger: dereference of NULL ‘display’
# 205| if (drm_dp_dpcd_writeb(&intel_dp->aux, DP_TEST_EDID_CHECKSUM,
# 206| block->checksum) <= 0)
# 207|-> drm_dbg_kms(display->drm,
# 208| "Failed to write EDID checksum\n");
# 209|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:233:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:233:17: danger: dereference of NULL ‘display’
# 231| switch (data->phy_pattern) {
# 232| case DP_LINK_QUAL_PATTERN_DISABLE:
# 233|-> drm_dbg_kms(display->drm, "Disable Phy Test Pattern\n");
# 234| intel_de_write(display, DDI_DP_COMP_CTL(pipe), 0x0);
# 235| if (DISPLAY_VER(display) >= 10)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:241:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:241:17: danger: dereference of NULL ‘display’
# 239| break;
# 240| case DP_LINK_QUAL_PATTERN_D10_2:
# 241|-> drm_dbg_kms(display->drm, "Set D10.2 Phy Test Pattern\n");
# 242| intel_de_write(display, DDI_DP_COMP_CTL(pipe),
# 243| DDI_DP_COMP_CTL_ENABLE | DDI_DP_COMP_CTL_D10_2);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:246:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:246:17: danger: dereference of NULL ‘display’
# 244| break;
# 245| case DP_LINK_QUAL_PATTERN_ERROR_RATE:
# 246|-> drm_dbg_kms(display->drm,
# 247| "Set Error Count Phy Test Pattern\n");
# 248| intel_de_write(display, DDI_DP_COMP_CTL(pipe),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:253:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:253:17: danger: dereference of NULL ‘display’
# 251| break;
# 252| case DP_LINK_QUAL_PATTERN_PRBS7:
# 253|-> drm_dbg_kms(display->drm, "Set PRBS7 Phy Test Pattern\n");
# 254| intel_de_write(display, DDI_DP_COMP_CTL(pipe),
# 255| DDI_DP_COMP_CTL_ENABLE | DDI_DP_COMP_CTL_PRBS7);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:263:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:263:17: danger: dereference of NULL ‘display’
# 261| * now for compliance test.
# 262| */
# 263|-> drm_dbg_kms(display->drm,
# 264| "Set 80Bit Custom Phy Test Pattern 0x3e0f83e0 0x0f83e0f8 0x0000f83e\n");
# 265| pattern_val = 0x3e0f83e0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:281:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:281:17: danger: dereference of NULL ‘display’
# 279| * now for compliance test.
# 280| */
# 281|-> drm_dbg_kms(display->drm,
# 282| "Set HBR2 compliance Phy Test Pattern\n");
# 283| pattern_val = 0xFB;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:290:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:289:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:290:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:290:25: danger: dereference of NULL ‘display’
# 288| case DP_LINK_QUAL_PATTERN_CP2520_PAT_3:
# 289| if (DISPLAY_VER(display) < 10) {
# 290|-> drm_warn(display->drm,
# 291| "Platform does not support TPS4\n");
# 292| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:294:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:289:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:294:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:294:17: danger: dereference of NULL ‘display’
# 292| break;
# 293| }
# 294|-> drm_dbg_kms(display->drm,
# 295| "Set TPS4 compliance Phy Test Pattern\n");
# 296| intel_de_write(display, DDI_DP_COMP_CTL(pipe), 0x0);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:302:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:223:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:226:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:302:17: danger: dereference of NULL ‘display’
# 300| break;
# 301| default:
# 302|-> drm_warn(display->drm, "Invalid Phy Test Pattern\n");
# 303| }
# 304| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:316:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:309:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:310:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:314:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:316:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:316:17: danger: dereference of NULL ‘display’
# 314| if (drm_dp_dpcd_read_phy_link_status(&intel_dp->aux, DP_PHY_DPRX,
# 315| link_status) < 0) {
# 316|-> drm_dbg_kms(display->drm, "failed to get link status\n");
# 317| return;
# 318| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:342:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:337:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:338:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:341:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:342:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:342:17: danger: dereference of NULL ‘display’
# 340|
# 341| if (drm_dp_get_phy_test_pattern(&intel_dp->aux, data)) {
# 342|-> drm_dbg_kms(display->drm,
# 343| "DP Phy Test pattern AUX read failure\n");
# 344| return DP_TEST_NAK;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:362:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_true: following ‘true’ branch (when ‘status <= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:362:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:362:17: danger: dereference of NULL ‘display’
# 360| status = drm_dp_dpcd_readb(&intel_dp->aux, DP_TEST_REQUEST, &request);
# 361| if (status <= 0) {
# 362|-> drm_dbg_kms(display->drm,
# 363| "Could not read test request from sink\n");
# 364| goto update_status;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:369:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:367:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:369:17: danger: dereference of NULL ‘display’
# 367| switch (request) {
# 368| case DP_TEST_LINK_TRAINING:
# 369|-> drm_dbg_kms(display->drm, "LINK_TRAINING test requested\n");
# 370| response = intel_dp_autotest_link_training(intel_dp);
# 371| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:373:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:367:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:373:17: danger: dereference of NULL ‘display’
# 371| break;
# 372| case DP_TEST_LINK_VIDEO_PATTERN:
# 373|-> drm_dbg_kms(display->drm, "TEST_PATTERN test requested\n");
# 374| response = intel_dp_autotest_video_pattern(intel_dp);
# 375| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:377:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:367:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:377:17: danger: dereference of NULL ‘display’
# 375| break;
# 376| case DP_TEST_LINK_EDID_READ:
# 377|-> drm_dbg_kms(display->drm, "EDID test requested\n");
# 378| response = intel_dp_autotest_edid(intel_dp);
# 379| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:381:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:367:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:381:17: danger: dereference of NULL ‘display’
# 379| break;
# 380| case DP_TEST_LINK_PHY_TEST_PATTERN:
# 381|-> drm_dbg_kms(display->drm, "PHY_PATTERN test requested\n");
# 382| response = intel_dp_autotest_phy_pattern(intel_dp);
# 383| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:385:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:355:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:357:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:361:12: branch_false: following ‘false’ branch (when ‘status > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:367:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:385:17: danger: dereference of NULL ‘display’
# 383| break;
# 384| default:
# 385|-> drm_dbg_kms(display->drm, "Invalid test request '%02x'\n",
# 386| request);
# 387| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:413:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:406:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:407:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:413:9: danger: dereference of NULL ‘display’
# 411| *pipe_mask = 0;
# 412|
# 413|-> drm_connector_list_iter_begin(display->drm, &conn_iter);
# 414| for_each_intel_connector_iter(connector, &conn_iter) {
# 415| struct drm_connector_state *conn_state =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:459:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:450:12: enter_function: entry to ‘intel_dp_do_phy_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:453:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:454:37: call_function: inlined call to ‘enc_to_intel_dp’ from ‘intel_dp_do_phy_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:459:33: danger: dereference of NULL ‘display’
# 457| int ret;
# 458|
# 459|-> ret = drm_modeset_lock(&display->drm->mode_config.connection_mutex,
# 460| ctx);
# 461| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:530:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:525:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:528:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:530:17: danger: dereference of NULL ‘display’
# 528| switch (intel_dp->compliance.test_type) {
# 529| case DP_TEST_LINK_TRAINING:
# 530|-> drm_dbg_kms(display->drm,
# 531| "Link Training Compliance Test requested\n");
# 532| /* Send a Hotplug Uevent to userspace to start modeset */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:536:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:525:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:528:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dp_test.c:536:17: danger: dereference of NULL ‘display’
# 534| break;
# 535| case DP_TEST_LINK_PHY_TEST_PATTERN:
# 536|-> drm_dbg_kms(display->drm,
# 537| "PHY test pattern Compliance Test requested\n");
# 538| /*
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:305:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:298:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:300:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:305:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:305:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:305:13: danger: dereference of NULL ‘display’
# 303|
# 304| trans = encoder->get_buf_trans(encoder, crtc_state, &n_entries);
# 305|-> if (drm_WARN_ON_ONCE(display->drm, !trans))
# 306| return;
# 307|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:727:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:715:6: enter_function: entry to ‘chv_set_phy_signal_level’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:720:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:721:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘chv_set_phy_signal_level’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:727:9: danger: dereference of NULL ‘display’
# 725| int i;
# 726|
# 727|-> vlv_dpio_get(display->drm);
# 728|
# 729| /* Clear calc init */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:821:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:811:13: enter_function: entry to ‘__chv_data_lane_soft_reset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:815:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:816:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘__chv_data_lane_soft_reset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:821:15: danger: dereference of NULL ‘display’
# 819| u32 val;
# 820|
# 821|-> val = vlv_dpio_read(display->drm, phy, VLV_PCS01_DW0(ch));
# 822| if (reset)
# 823| val &= ~(DPIO_PCS_TX_LANE2_RESET | DPIO_PCS_TX_LANE1_RESET);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:862:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:860:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:862:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:862:9: danger: dereference of NULL ‘display’
# 860| struct intel_display *display = to_intel_display(encoder);
# 861|
# 862|-> vlv_dpio_get(display->drm);
# 863| __chv_data_lane_soft_reset(encoder, crtc_state, reset);
# 864| vlv_dpio_put(display->drm);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:890:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:867:6: enter_function: entry to ‘chv_phy_pre_pll_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:870:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:871:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘chv_phy_pre_pll_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:890:9: danger: dereference of NULL ‘display’
# 888| chv_phy_powergate_lanes(encoder, true, lane_mask);
# 889|
# 890|-> vlv_dpio_get(display->drm);
# 891|
# 892| /* Assert data lane reset */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:959:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:948:6: enter_function: entry to ‘chv_phy_pre_encoder_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:951:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:952:37: call_function: inlined call to ‘enc_to_intel_dp’ from ‘chv_phy_pre_encoder_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:959:9: danger: dereference of NULL ‘display’
# 957| u32 val;
# 958|
# 959|-> vlv_dpio_get(display->drm);
# 960|
# 961| /* allow hardware to manage TX FIFO reset source */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1045:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1037:6: enter_function: entry to ‘chv_phy_post_pll_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1040:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1041:29: call_function: inlined call to ‘enc_to_dig_port’ from ‘chv_phy_post_pll_disable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1045:9: danger: dereference of NULL ‘display’
# 1043| u32 val;
# 1044|
# 1045|-> vlv_dpio_get(display->drm);
# 1046|
# 1047| /* disable left/right clock distribution */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1082:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1072:6: enter_function: entry to ‘vlv_set_phy_signal_level’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1077:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1078:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘vlv_set_phy_signal_level’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1082:9: danger: dereference of NULL ‘display’
# 1080| enum dpio_phy phy = vlv_dig_port_to_phy(dig_port);
# 1081|
# 1082|-> vlv_dpio_get(display->drm);
# 1083|
# 1084| vlv_dpio_write(display->drm, phy, VLV_TX_DW5_GRP(ch), 0x00000000);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1109:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1100:6: enter_function: entry to ‘vlv_phy_pre_pll_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1103:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1104:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘vlv_phy_pre_pll_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1109:9: danger: dereference of NULL ‘display’
# 1107|
# 1108| /* Program Tx lane resets to default */
# 1109|-> vlv_dpio_get(display->drm);
# 1110|
# 1111| vlv_dpio_write(display->drm, phy, VLV_PCS_DW0_GRP(ch),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1140:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1128:6: enter_function: entry to ‘vlv_phy_pre_encoder_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1131:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1132:37: call_function: inlined call to ‘enc_to_intel_dp’ from ‘vlv_phy_pre_encoder_enable’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1140:9: danger: dereference of NULL ‘display’
# 1138| u32 val;
# 1139|
# 1140|-> vlv_dpio_get(display->drm);
# 1141|
# 1142| /* Enable clock channels for this port */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1164:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1156:6: enter_function: entry to ‘vlv_phy_reset_lanes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1159:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1160:47: call_function: inlined call to ‘enc_to_dig_port’ from ‘vlv_phy_reset_lanes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpio_phy.c:1164:9: danger: dereference of NULL ‘display’
# 1162| enum dpio_phy phy = vlv_dig_port_to_phy(dig_port);
# 1163|
# 1164|-> vlv_dpio_get(display->drm);
# 1165| vlv_dpio_write(display->drm, phy, VLV_PCS_DW0_GRP(ch), 0x00000000);
# 1166| vlv_dpio_write(display->drm, phy, VLV_PCS_DW1_GRP(ch), 0x00e00060);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:1940:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:1932:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:1933:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:1940:9: danger: dereference of NULL ‘display’
# 1938| u32 tmp, coreclk;
# 1939|
# 1940|-> vlv_dpio_get(display->drm);
# 1941|
# 1942| /* See eDP HDMI DPIO driver vbios notes doc */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2063:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2053:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2054:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2063:9: danger: dereference of NULL ‘display’
# 2061| m2_frac = clock->m2 & 0x3fffff;
# 2062|
# 2063|-> vlv_dpio_get(display->drm);
# 2064|
# 2065| /* p1 and p2 divider */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2150:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2142:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2143:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dpll.c:2150:9: danger: dereference of NULL ‘display’
# 2148| u32 tmp;
# 2149|
# 2150|-> vlv_dpio_get(display->drm);
# 2151|
# 2152| /* Enable back the 10bit clock to display controller */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_drrs.c:140:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_drrs.c:134:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_drrs.c:135:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_drrs.c:140:9: danger: dereference of NULL ‘display’
# 138| frontbuffer_bits = INTEL_FRONTBUFFER_ALL_MASK(crtc->pipe);
# 139|
# 140|-> for_each_intel_crtc_in_pipe_mask(display->drm, crtc,
# 141| crtc_state->joiner_pipes)
# 142| frontbuffer_bits |= INTEL_FRONTBUFFER_ALL_MASK(crtc->pipe);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:41:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:22:5: enter_function: entry to ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:26:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:34:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:39:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:39:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:40:59: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:39:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:41:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:41:25: danger: dereference of NULL ‘display’
# 39| if (tiling != I915_TILING_NONE &&
# 40| tiling != intel_fb_modifier_to_tiling(mode_cmd->modifier[0])) {
# 41|-> drm_dbg_kms(display->drm,
# 42| "tiling_mode doesn't match fb modifier\n");
# 43| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:49:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:22:5: enter_function: entry to ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:26:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:34:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:46:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:46:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:48:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:48:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:49:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:49:25: danger: dereference of NULL ‘display’
# 47| mode_cmd->modifier[0] = I915_FORMAT_MOD_X_TILED;
# 48| } else if (tiling == I915_TILING_Y) {
# 49|-> drm_dbg_kms(display->drm,
# 50| "No Y tiling for legacy addfb\n");
# 51| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:61:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:22:5: enter_function: entry to ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:26:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:59:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:60:51: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:59:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:61:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:61:17: danger: dereference of NULL ‘display’
# 59| if (DISPLAY_VER(display) < 4 &&
# 60| tiling != intel_fb_modifier_to_tiling(mode_cmd->modifier[0])) {
# 61|-> drm_dbg_kms(display->drm,
# 62| "tiling_mode must match fb modifier exactly on gen2/3\n");
# 63| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:71:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:22:5: enter_function: entry to ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:26:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:29:9: call_function: inlined call to ‘i915_gem_object_lock’ from ‘intel_fb_bo_framebuffer_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:48:27: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:59:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:70:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fb_bo.c:71:17: danger: dereference of NULL ‘display’
# 69| */
# 70| if (tiling != I915_TILING_NONE && mode_cmd->pitches[0] != stride) {
# 71|-> drm_dbg_kms(display->drm,
# 72| "pitch (%d) must match tiling stride (%d)\n",
# 73| mode_cmd->pitches[0], stride);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:283:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:268:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:280:12: branch_true: following ‘true’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:281:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:283:17: danger: dereference of NULL ‘display’
# 281| (sizes->fb_width > fb->base.width ||
# 282| sizes->fb_height > fb->base.height)) {
# 283|-> drm_dbg_kms(display->drm,
# 284| "BIOS fb too small (%dx%d), we require (%dx%d),"
# 285| " releasing it\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:268:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:280:12: branch_true: following ‘true’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:281:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:280:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:282:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:281:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:292:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:20: danger: dereference of NULL ‘display’
# 292| wakeref = intel_display_rpm_get(display);
# 293|
# 294|-> if (!fb || drm_WARN_ON(display->drm, !intel_fb_bo(&fb->base))) {
# 295| drm_dbg_kms(display->drm,
# 296| "no BIOS fb, allocating a new one\n");
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:295:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:268:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:12: branch_true: following ‘true’ branch (when ‘fb’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:295:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:295:17: danger: dereference of NULL ‘display’
# 293|
# 294| if (!fb || drm_WARN_ON(display->drm, !intel_fb_bo(&fb->base))) {
# 295|-> drm_dbg_kms(display->drm,
# 296| "no BIOS fb, allocating a new one\n");
# 297|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:304:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:268:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:280:12: branch_true: following ‘true’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:281:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:280:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:282:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:281:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:292:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:294:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_fbdev.c:304:17: danger: dereference of NULL ‘display’
# 302| }
# 303| } else {
# 304|-> drm_dbg_kms(display->drm, "re-using BIOS fb\n");
# 305| prealloc = true;
# 306| sizes->fb_width = fb->base.width;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_flipq.c:455:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_flipq.c:466:6: enter_function: entry to ‘intel_flipq_unhalt_dmc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_flipq.c:468:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_flipq.c:470:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_flipq.c:470:13: call_function: calling ‘need_dmc_halt_wa’ from ‘intel_flipq_unhalt_dmc’
# 453| return DISPLAY_VER(display) == 20 ||
# 454| (display->platform.pantherlake &&
# 455|-> IS_DISPLAY_STEP(display, STEP_A0, STEP_B0));
# 456| }
# 457|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:143:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:252:6: enter_function: entry to ‘intel_atomic_swap_global_state’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:254:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:259:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:259:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:259:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:261:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:267:22: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:267:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:270:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:270:17: call_function: calling ‘assert_global_state_write_locked’ from ‘intel_atomic_swap_global_state’
# 141| struct intel_crtc *crtc;
# 142|
# 143|-> for_each_intel_crtc(display->drm, crtc)
# 144| drm_modeset_lock_assert_held(&crtc->base.mutex);
# 145| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:166:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:162:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:163:41: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:166:9: danger: dereference of NULL ‘display’
# 164| struct intel_crtc *crtc;
# 165|
# 166|-> for_each_intel_crtc(display->drm, crtc) {
# 167| if (modeset_lock_is_held(ctx, &crtc->base.mutex))
# 168| return;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:304:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:301:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:304:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:304:9: danger: dereference of NULL ‘display’
# 302| struct intel_crtc *crtc;
# 303|
# 304|-> for_each_intel_crtc(display->drm, crtc) {
# 305| int ret;
# 306|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:337:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:334:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:337:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_global_state.c:337:9: danger: dereference of NULL ‘display’
# 335| struct intel_crtc *crtc;
# 336|
# 337|-> for_each_intel_crtc(display->drm, crtc)
# 338| if (!intel_atomic_get_new_crtc_state(state, crtc))
# 339| return false;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_link_bw.c:111:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_link_bw.c:106:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_link_bw.c:111:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_link_bw.c:111:9: danger: dereference of NULL ‘display’
# 109| int max_bpp_x16 = 0;
# 110|
# 111|-> for_each_intel_crtc_in_pipe_mask(display->drm, crtc, pipe_mask) {
# 112| struct intel_crtc_state *crtc_state;
# 113| int link_bpp_x16;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:277:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:390:5: enter_function: entry to ‘intel_opregion_notify_encoder’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:393:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:400:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:400:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:404:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:404:15: call_function: calling ‘check_swsci_function’ from ‘intel_opregion_notify_encoder’
# 275| static int check_swsci_function(struct intel_display *display, u32 function)
# 276| {
# 277|-> struct intel_opregion *opregion = display->opregion;
# 278| struct opregion_swsci *swsci;
# 279| u32 main_function, sub_function;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:1113:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:1112:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:1113:32: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_opregion.c:1113:32: danger: dereference of NULL ‘display’
# 1111| {
# 1112| struct intel_display *display = to_intel_display(connector);
# 1113|-> struct intel_opregion *opregion = display->opregion;
# 1114| const struct drm_edid *drm_edid;
# 1115| const void *edid;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1521:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1513:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1514:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1518:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1521:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1521:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1521:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane.c:1521:9: danger: dereference of NULL ‘display’
# 1519| return;
# 1520|
# 1521|-> drm_WARN_ON(display->drm, plane_state->uapi.visible);
# 1522|
# 1523| plane_state->is_y_plane = false;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:34:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:312:1: enter_function: entry to ‘intel_find_initial_plane_obj’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:330:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:333:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:333:13: call_function: calling ‘intel_alloc_initial_plane_obj’ from ‘intel_find_initial_plane_obj’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:333:13: return_function: returning to ‘intel_find_initial_plane_obj’ from ‘intel_alloc_initial_plane_obj’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:333:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:343:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:343:13: call_function: calling ‘intel_reuse_initial_plane_obj’ from ‘intel_find_initial_plane_obj’
# 32| struct intel_crtc *crtc;
# 33|
# 34|-> for_each_intel_crtc(display->drm, crtc) {
# 35| struct intel_plane *plane =
# 36| to_intel_plane(crtc->base.primary);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:130:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:264:1: enter_function: entry to ‘intel_alloc_initial_plane_obj’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:268:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:285:15: call_function: calling ‘initial_plane_vma’ from ‘intel_alloc_initial_plane_obj’
# 128| struct intel_initial_plane_config *plane_config)
# 129| {
# 130|-> struct drm_i915_private *i915 = to_i915(display->drm);
# 131| struct intel_memory_region *mem;
# 132| struct drm_i915_gem_object *obj;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:279:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:267:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:268:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_plane_initial.c:279:17: danger: dereference of NULL ‘display’
# 277| break;
# 278| default:
# 279|-> drm_dbg(display->drm,
# 280| "Unsupported modifier for initial FB: 0x%llx\n",
# 281| fb->modifier);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:80:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:75:13: enter_function: entry to ‘quirk_fw_sync_len’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:77:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:79:9: call_function: inlined call to ‘intel_set_dpcd_quirk’ from ‘quirk_fw_sync_len’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:80:9: danger: dereference of NULL ‘display’
# 78|
# 79| intel_set_dpcd_quirk(intel_dp, QUIRK_FW_SYNC_LEN);
# 80|-> drm_info(display->drm, "Applying Fast Wake sync pulse count quirk\n");
# 81| }
# 82|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:282:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:281:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:282:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_quirks.c:282:29: danger: dereference of NULL ‘display’
# 280| {
# 281| struct intel_display *display = to_intel_display(intel_dp);
# 282|-> struct pci_dev *d = to_pci_dev(display->drm->dev);
# 283| int i;
# 284|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1300:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1274:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1275:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1298:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1298:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1299:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1299:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1300:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1300:25: danger: dereference of NULL ‘display’
# 1298| if (adjusted_mode->flags & DRM_MODE_FLAG_INTERLACE) {
# 1299| if (src_h & 1) {
# 1300|-> drm_dbg_kms(display->drm,
# 1301| "Source height must be even with interlaced modes\n");
# 1302| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1313:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1274:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1275:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1298:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1313:17: danger: dereference of NULL ‘display’
# 1311| if (src_w < min_width || src_h < min_height ||
# 1312| src_w > 2048 || src_h > 2048) {
# 1313|-> drm_dbg_kms(display->drm,
# 1314| "Source dimensions (%dx%d) exceed hardware limits (%dx%d - %dx%d)\n",
# 1315| src_w, src_h, min_width, min_height, 2048, 2048);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1320:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1274:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1275:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1298:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1311:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1312:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1311:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1319:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1319:12: branch_true: following ‘true’ branch (when ‘width_bytes > 4096’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1320:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1320:17: danger: dereference of NULL ‘display’
# 1318|
# 1319| if (width_bytes > 4096) {
# 1320|-> drm_dbg_kms(display->drm,
# 1321| "Fetch width (%d) exceeds hardware max with scaling (%u)\n",
# 1322| width_bytes, 4096);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1327:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1274:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1275:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1298:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1311:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1312:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1311:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1319:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1319:12: branch_false: following ‘false’ branch (when ‘width_bytes <= 4096’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1326:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1326:12: branch_true: following ‘true’ branch (when ‘stride > 4096’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1327:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1327:17: danger: dereference of NULL ‘display’
# 1325|
# 1326| if (stride > 4096) {
# 1327|-> drm_dbg_kms(display->drm,
# 1328| "Stride (%u) exceeds hardware max with scaling (%u)\n",
# 1329| stride, 4096);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1392:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1385:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1386:22: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1389:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1390:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1389:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1391:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1389:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1392:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_sprite.c:1392:17: danger: dereference of NULL ‘display’
# 1390| rotation & DRM_MODE_ROTATE_180 &&
# 1391| rotation & DRM_MODE_REFLECT_X) {
# 1392|-> drm_dbg_kms(display->drm,
# 1393| "Cannot rotate and reflect at the same time\n");
# 1394| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:265:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 263| struct intel_display *display = to_intel_display(tc->dig_port);
# 264|
# 265|-> drm_WARN_ON(display->drm,
# 266| !intel_display_power_is_enabled(display, tc_port_power_domain(tc)));
# 267| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:470:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1871:13: enter_function: entry to ‘__intel_tc_port_lock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1874:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1876:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1880:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1881:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1881:17: call_function: calling ‘intel_tc_port_update_mode’ from ‘__intel_tc_port_lock’
# 468| u32 valid_hpd_mask;
# 469|
# 470|-> drm_WARN_ON(display->drm, tc->mode != TC_PORT_DISCONNECTED);
# 471|
# 472| if (hweight32(live_status_mask) != 1)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:485:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1871:13: enter_function: entry to ‘__intel_tc_port_lock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1874:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1876:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1880:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1881:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1881:17: call_function: calling ‘intel_tc_port_update_mode’ from ‘__intel_tc_port_lock’
# 483|
# 484| /* If live status mismatches the VBT flag, trust the live status. */
# 485|-> drm_dbg_kms(display->drm,
# 486| "Port %s: live status %08x mismatches the legacy port flag %08x, fixing flag\n",
# 487| tc->port_name, live_status_mask, valid_hpd_mask);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1280:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1759:6: enter_function: entry to ‘intel_tc_port_link_needs_reset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1764:16: call_function: calling ‘__intel_tc_port_link_needs_reset’ from ‘intel_tc_port_link_needs_reset’
# 1278|
# 1279| /* The sink can be connected only in a single mode. */
# 1280|-> drm_WARN_ON_ONCE(display->drm, hweight32(mask) > 1);
# 1281|
# 1282| return mask;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1497:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1959:6: enter_function: entry to ‘intel_tc_port_put_link’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1963:9: call_function: inlined call to ‘intel_tc_port_lock’ from ‘intel_tc_port_put_link’
# 1495| }
# 1496|
# 1497|-> drm_WARN_ON(display->drm, !connected);
# 1498| }
# 1499|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1528:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1898:13: enter_function: entry to ‘intel_tc_port_disconnect_phy_work’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1905:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1906:17: call_function: inlined call to ‘intel_tc_port_update_mode’ from ‘intel_tc_port_disconnect_phy_work’
# 1526| aux_domain = intel_aux_power_domain(dig_port);
# 1527| if (intel_display_power_is_enabled(display, aux_domain))
# 1528|-> drm_dbg_kms(display->drm, "Port %s: AUX unexpectedly powered\n",
# 1529| tc->port_name);
# 1530| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1536:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1898:13: enter_function: entry to ‘intel_tc_port_disconnect_phy_work’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1905:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1906:17: call_function: inlined call to ‘intel_tc_port_update_mode’ from ‘intel_tc_port_disconnect_phy_work’
# 1534| tc_phy_connect(tc, required_lanes);
# 1535|
# 1536|-> drm_dbg_kms(display->drm,
# 1537| "Port %s: TC port mode reset (%s -> %s) pin assignment: %c max lanes: %d\n",
# 1538| tc->port_name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1594:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 1592| mutex_lock(&tc->lock);
# 1593|
# 1594|-> drm_WARN_ON(display->drm, tc->mode != TC_PORT_DISCONNECTED);
# 1595| drm_WARN_ON(display->drm, tc->lock_wakeref);
# 1596| drm_WARN_ON(display->drm, tc->link_refcount);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1595:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 1593|
# 1594| drm_WARN_ON(display->drm, tc->mode != TC_PORT_DISCONNECTED);
# 1595|-> drm_WARN_ON(display->drm, tc->lock_wakeref);
# 1596| drm_WARN_ON(display->drm, tc->link_refcount);
# 1597|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1596:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 1594| drm_WARN_ON(display->drm, tc->mode != TC_PORT_DISCONNECTED);
# 1595| drm_WARN_ON(display->drm, tc->lock_wakeref);
# 1596|-> drm_WARN_ON(display->drm, tc->link_refcount);
# 1597|
# 1598| tc_phy_get_hw_state(tc);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1619:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 1617| update_mode = true;
# 1618| } else if (tc->mode == TC_PORT_DISCONNECTED) {
# 1619|-> drm_WARN_ON(display->drm, !tc->legacy_port);
# 1620| drm_err(display->drm,
# 1621| "Port %s: PHY disconnected on enabled port, connecting it\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1620:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1976:5: enter_function: entry to ‘intel_tc_port_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1986:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1987:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1990:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2004:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2009:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:2019:9: call_function: calling ‘intel_tc_port_init_mode’ from ‘intel_tc_port_init’
# 1618| } else if (tc->mode == TC_PORT_DISCONNECTED) {
# 1619| drm_WARN_ON(display->drm, !tc->legacy_port);
# 1620|-> drm_err(display->drm,
# 1621| "Port %s: PHY disconnected on enabled port, connecting it\n",
# 1622| tc->port_name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1884:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1959:6: enter_function: entry to ‘intel_tc_port_put_link’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1963:9: call_function: inlined call to ‘intel_tc_port_lock’ from ‘intel_tc_port_put_link’
# 1882| false);
# 1883|
# 1884|-> drm_WARN_ON(display->drm, tc->mode == TC_PORT_DISCONNECTED);
# 1885| drm_WARN_ON(display->drm, tc->mode != TC_PORT_TBT_ALT && !tc_phy_is_owned(tc));
# 1886| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1885:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1959:6: enter_function: entry to ‘intel_tc_port_put_link’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1963:9: call_function: inlined call to ‘intel_tc_port_lock’ from ‘intel_tc_port_put_link’
# 1883|
# 1884| drm_WARN_ON(display->drm, tc->mode == TC_PORT_DISCONNECTED);
# 1885|-> drm_WARN_ON(display->drm, tc->mode != TC_PORT_TBT_ALT && !tc_phy_is_owned(tc));
# 1886| }
# 1887|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1978:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1980:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_tc.c:1983:13: danger: dereference of NULL ‘display’
# 1981| enum tc_port tc_port = intel_encoder_to_tc(&dig_port->base);
# 1982|
# 1983|-> if (drm_WARN_ON(display->drm, tc_port == TC_PORT_NONE))
# 1984| return -EINVAL;
# 1985|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:310:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:712:5: enter_function: entry to ‘intel_vblank_evade’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:715:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:717:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:721:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:732:28: call_function: calling ‘intel_get_crtc_scanline’ from ‘intel_vblank_evade’
# 308| __acquires(i915->uncore.lock)
# 309| {
# 310|-> struct drm_i915_private *i915 = to_i915(display->drm);
# 311| spin_lock(&i915->uncore.lock);
# 312| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:737:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:712:5: enter_function: entry to ‘intel_vblank_evade’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:715:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:717:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:721:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:732:28: call_function: calling ‘intel_get_crtc_scanline’ from ‘intel_vblank_evade’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:732:28: return_function: returning to ‘intel_vblank_evade’ from ‘intel_get_crtc_scanline’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:733:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:736:20: branch_false: following ‘false’ branch (when ‘timeout != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:743:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:732:28: call_function: calling ‘intel_get_crtc_scanline’ from ‘intel_vblank_evade’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:732:28: return_function: returning to ‘intel_vblank_evade’ from ‘intel_get_crtc_scanline’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:733:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/intel_vblank.c:737:25: danger: dereference of NULL ‘display’
# 735|
# 736| if (!timeout) {
# 737|-> drm_dbg_kms(display->drm,
# 738| "Potential atomic update failure on pipe %c\n",
# 739| pipe_name(crtc->pipe));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:402:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:644:31: call_function: calling ‘setup_plane_scaler’ from ‘intel_atomic_setup_scalers’
# 400| *scaler_id = intel_allocate_scaler(scaler_state, crtc, plane_state, casf_scaler);
# 401|
# 402|-> if (drm_WARN(display->drm, *scaler_id < 0,
# 403| "Cannot find scaler for %s:%d\n", name, idx))
# 404| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:466:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:644:31: call_function: calling ‘setup_plane_scaler’ from ‘intel_atomic_setup_scalers’
# 464|
# 465| if (hscale < 0 || vscale < 0) {
# 466|-> drm_dbg_kms(display->drm,
# 467| "[CRTC:%d:%s] scaler %d doesn't support required plane scaling\n",
# 468| crtc->base.base.id, crtc->base.name, *scaler_id);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:503:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:599:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:636:20: branch_true: following ‘true’ branch (when ‘i == 31’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:637:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:637:31: call_function: calling ‘setup_crtc_scaler’ from ‘intel_atomic_setup_scalers’
# 501|
# 502| if (hscale < 0 || vscale < 0) {
# 503|-> drm_dbg_kms(display->drm,
# 504| "Scaler %d doesn't support required pipe scaling\n",
# 505| *scaler_id);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:516:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:599:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:636:20: branch_true: following ‘true’ branch (when ‘i == 31’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:637:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:637:31: call_function: calling ‘setup_crtc_scaler’ from ‘intel_atomic_setup_scalers’
# 514| scaler_state->scalers[*scaler_id].vscale = vscale;
# 515|
# 516|-> drm_dbg_kms(display->drm, "[CRTC:%d:%s] attached scaler id %u.%u to %s:%d\n",
# 517| crtc->base.base.id, crtc->base.name,
# 518| crtc->pipe, *scaler_id, name, idx);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:554:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:542:12: enter_function: entry to ‘setup_plane_scaler’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:546:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:548:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘setup_plane_scaler’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:554:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:554:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:554:13: danger: dereference of NULL ‘display’
# 552|
# 553| /* plane on different crtc cannot be a scaler user of this crtc */
# 554|-> if (drm_WARN_ON(display->drm, plane->pipe != crtc->pipe))
# 555| return 0;
# 556|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:621:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:599:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:621:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:621:17: danger: dereference of NULL ‘display’
# 619| /* fail if required scalers > available scalers */
# 620| if (num_scalers_need > crtc->num_scalers) {
# 621|-> drm_dbg_kms(display->drm,
# 622| "[CRTC:%d:%s] too many scaling requests %d > %d\n",
# 623| crtc->base.base.id, crtc->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:642:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:594:5: enter_function: entry to ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:597:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:599:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_atomic_setup_scalers’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:620:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:629:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:633:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:636:20: branch_false: following ‘false’ branch (when ‘i != 31’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:642:33: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:642:33: danger: dereference of NULL ‘display’
# 640| } else {
# 641| struct intel_plane *plane =
# 642|-> to_intel_plane(drm_plane_from_index(display->drm, i));
# 643|
# 644| ret = setup_plane_scaler(state, crtc, plane);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:822:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:803:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:804:35: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:819:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:822:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:822:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:822:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_scaler.c:822:13: danger: dereference of NULL ‘display’
# 820| return;
# 821|
# 822|-> if (drm_WARN_ON(display->drm,
# 823| crtc_state->scaler_state.scaler_id < 0))
# 824| return;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1301:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1549:1: enter_function: entry to ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1554:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1555:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1579:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1581:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1583:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1586:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1588:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1590:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1593:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1605:17: call_function: calling ‘skl_plane_aux_dist’ from ‘icl_plane_update_noarm’
# 1299|
# 1300| if (intel_fb_uses_dpt(fb)) {
# 1301|-> drm_WARN_ON(display->drm, offset & 0x1fffff);
# 1302| return offset >> 9;
# 1303| } else {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1304:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1549:1: enter_function: entry to ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1554:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1555:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1579:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1581:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1583:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1586:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1588:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1590:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1593:9: call_function: inlined call to ‘intel_de_write_dsb’ from ‘icl_plane_update_noarm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1605:17: call_function: calling ‘skl_plane_aux_dist’ from ‘icl_plane_update_noarm’
# 1302| return offset >> 9;
# 1303| } else {
# 1304|-> drm_WARN_ON(display->drm, offset & 0xfff);
# 1305| return offset;
# 1306| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1761:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1760:38: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1761:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1761:17: danger: dereference of NULL ‘display’
# 1759| if (rotation & ~(DRM_MODE_ROTATE_0 | DRM_MODE_ROTATE_180) &&
# 1760| intel_fb_is_ccs_modifier(fb->modifier)) {
# 1761|-> drm_dbg_kms(display->drm,
# 1762| "[PLANE:%d:%s] RC support only with 0/180 degree rotation (%x)\n",
# 1763| plane->base.base.id, plane->base.name, rotation);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1770:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1760:38: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1767:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1767:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1768:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1767:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1769:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1767:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1770:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1770:17: danger: dereference of NULL ‘display’
# 1768| fb->modifier == DRM_FORMAT_MOD_LINEAR &&
# 1769| DISPLAY_VER(display) < 35) {
# 1770|-> drm_dbg_kms(display->drm,
# 1771| "[PLANE:%d:%s] horizontal flip is not supported with linear surface formats\n",
# 1772| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1782:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1779:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1780:40: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1779:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1781:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1779:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1782:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1782:17: danger: dereference of NULL ‘display’
# 1780| intel_fb_is_tile4_modifier(fb->modifier) &&
# 1781| DISPLAY_VER(display) >= 20) {
# 1782|-> drm_dbg_kms(display->drm,
# 1783| "[PLANE:%d:%s] horizontal flip is not supported with tile4 surface formats\n",
# 1784| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1790:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1788:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1789:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1789:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1790:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1790:25: danger: dereference of NULL ‘display’
# 1788| if (drm_rotation_90_or_270(rotation)) {
# 1789| if (!intel_fb_supports_90_270_rotation(to_intel_framebuffer(fb))) {
# 1790|-> drm_dbg_kms(display->drm,
# 1791| "[PLANE:%d:%s] Y/Yf tiling required for 90/270!\n",
# 1792| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1815:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1788:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1789:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1789:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1800:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1815:25: danger: dereference of NULL ‘display’
# 1813| case DRM_FORMAT_XVYU12_16161616:
# 1814| case DRM_FORMAT_XVYU16161616:
# 1815|-> drm_dbg_kms(display->drm,
# 1816| "[PLANE:%d:%s] unsupported pixel format %p4cc for 90/270!\n",
# 1817| plane->base.base.id, plane->base.name, &fb->format->format);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1828:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1825:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1826:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1825:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1825:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1825:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1828:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1828:17: danger: dereference of NULL ‘display’
# 1826| fb->modifier != DRM_FORMAT_MOD_LINEAR &&
# 1827| fb->modifier != I915_FORMAT_MOD_X_TILED) {
# 1828|-> drm_dbg_kms(display->drm,
# 1829| "[PLANE:%d:%s] Y/Yf tiling not supported in IF-ID mode\n",
# 1830| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1838:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1748:12: enter_function: entry to ‘skl_plane_check_fb’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1751:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1752:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1756:12: branch_false: following ‘false’ branch (when ‘fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1759:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1835:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1837:34: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1837:13: call_function: inlined call to ‘intel_format_is_p01x’ from ‘skl_plane_check_fb’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1838:17: danger: dereference of NULL ‘display’
# 1836| plane_state->ckey.flags & I915_SET_COLORKEY_SOURCE &&
# 1837| intel_format_is_p01x(fb->format->format)) {
# 1838|-> drm_dbg_kms(display->drm,
# 1839| "[PLANE:%d:%s] source color keying not supported with P01x formats\n",
# 1840| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1867:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1850:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1851:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1865:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1865:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1867:17: danger: dereference of NULL ‘display’
# 1865| if (DISPLAY_VER(display) == 10 &&
# 1866| (crtc_x + crtc_w < 4 || crtc_x > pipe_src_w - 4)) {
# 1867|-> drm_dbg_kms(display->drm,
# 1868| "[PLANE:%d:%s] requested plane X %s position %d invalid (valid range %d-%d)\n",
# 1869| plane->base.base.id, plane->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1892:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1881:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1882:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1888:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1888:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1892:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:1892:17: danger: dereference of NULL ‘display’
# 1890| (rotation == DRM_MODE_ROTATE_270 ||
# 1891| rotation == (DRM_MODE_REFLECT_X | DRM_MODE_ROTATE_90))) {
# 1892|-> drm_dbg_kms(display->drm,
# 1893| "[PLANE:%d:%s] src width must be multiple of 4 for rotated planar YUV\n",
# 1894| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2004:5: enter_function: entry to ‘skl_calc_main_surface_offset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2007:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2008:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: branch_true: following ‘true’ branch (when ‘alignment != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: call_function: inlined call to ‘is_power_of_2’ from ‘skl_calc_main_surface_offset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2017:13: danger: dereference of NULL ‘display’
# 2015| intel_add_fb_offsets(x, y, plane_state, 0);
# 2016| *offset = intel_plane_compute_aligned_offset(x, y, plane_state, 0);
# 2017|-> if (drm_WARN_ON(display->drm, alignment && !is_power_of_2(alignment)))
# 2018| return -EINVAL;
# 2019|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2041:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2007:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2008:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2036:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2037:27: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2039:24: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2040:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2041:33: danger: dereference of NULL ‘display’
# 2039| while ((*x + w) * cpp > plane_state->view.color_plane[0].mapping_stride) {
# 2040| if (*offset == 0) {
# 2041|-> drm_dbg_kms(display->drm,
# 2042| "[PLANE:%d:%s] unable to find suitable display surface offset due to X-tiling\n",
# 2043| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2076:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2058:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2059:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2076:17: danger: dereference of NULL ‘display’
# 2074|
# 2075| if (w > max_width || w < min_width || h > max_height || h < min_height) {
# 2076|-> drm_dbg_kms(display->drm,
# 2077| "[PLANE:%d:%s] requested Y/RGB source size %dx%d outside limits (min: %dx%d max: %dx%d)\n",
# 2078| plane->base.base.id, plane->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2104:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2058:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2059:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2075:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2084:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2092:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2092:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2104:25: danger: dereference of NULL ‘display’
# 2102| if (x != plane_state->view.color_plane[aux_plane].x ||
# 2103| y != plane_state->view.color_plane[aux_plane].y) {
# 2104|-> drm_dbg_kms(display->drm,
# 2105| "[PLANE:%d:%s] unable to find suitable display surface offset due to CCS\n",
# 2106| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2112:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2058:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2059:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2075:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2084:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2092:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2111:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2112:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2112:17: danger: dereference of NULL ‘display’
# 2110|
# 2111| if (DISPLAY_VER(display) >= 13)
# 2112|-> drm_WARN_ON(display->drm, x > 65535 || y > 65535);
# 2113| else
# 2114| drm_WARN_ON(display->drm, x > 8191 || y > 8191);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2114:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2058:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2059:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2075:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2084:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2092:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2111:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2114:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2114:17: danger: dereference of NULL ‘display’
# 2112| drm_WARN_ON(display->drm, x > 65535 || y > 65535);
# 2113| else
# 2114|-> drm_WARN_ON(display->drm, x > 8191 || y > 8191);
# 2115|
# 2116| plane_state->view.color_plane[0].offset = offset;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2151:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2132:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2133:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2151:17: danger: dereference of NULL ‘display’
# 2149| /* FIXME not quite sure how/if these apply to the chroma plane */
# 2150| if (w > max_width || w < min_width || h > max_height || h < min_height) {
# 2151|-> drm_dbg_kms(display->drm,
# 2152| "[PLANE:%d:%s] requested CbCr source size %dx%d outside limits (min: %dx%d max: %dx%d)\n",
# 2153| plane->base.base.id, plane->base.name,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2186:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2132:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2133:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2150:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2162:12: branch_true: following ‘true’ branch (when ‘ccs_plane != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2163:34: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2186:25: danger: dereference of NULL ‘display’
# 2184| if (x != plane_state->view.color_plane[ccs_plane].x ||
# 2185| y != plane_state->view.color_plane[ccs_plane].y) {
# 2186|-> drm_dbg_kms(display->drm,
# 2187| "[PLANE:%d:%s] unable to find suitable display surface offset due to CCS\n",
# 2188| plane->base.base.id, plane->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2194:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2132:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2133:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2150:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2193:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2194:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2194:17: danger: dereference of NULL ‘display’
# 2192|
# 2193| if (DISPLAY_VER(display) >= 13)
# 2194|-> drm_WARN_ON(display->drm, x > 65535 || y > 65535);
# 2195| else
# 2196| drm_WARN_ON(display->drm, x > 8191 || y > 8191);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2196:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2132:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2133:37: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2150:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2193:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2196:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2196:17: danger: dereference of NULL ‘display’
# 2194| drm_WARN_ON(display->drm, x > 65535 || y > 65535);
# 2195| else
# 2196|-> drm_WARN_ON(display->drm, x > 8191 || y > 8191);
# 2197|
# 2198| plane_state->view.color_plane[uv_plane].offset = offset;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2434:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2430:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2431:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2434:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2434:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2434:9: danger: dereference of NULL ‘display’
# 2432| struct intel_plane *y_plane = to_intel_plane(y_plane_state->uapi.plane);
# 2433|
# 2434|-> drm_WARN_ON(display->drm, icl_is_nv12_y_plane(display, uv_plane->id));
# 2435| drm_WARN_ON(display->drm, !icl_is_nv12_y_plane(display, y_plane->id));
# 2436|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2435:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2430:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2431:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2434:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2435:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2435:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2435:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:2435:9: danger: dereference of NULL ‘display’
# 2433|
# 2434| drm_WARN_ON(display->drm, icl_is_nv12_y_plane(display, uv_plane->id));
# 2435|-> drm_WARN_ON(display->drm, !icl_is_nv12_y_plane(display, y_plane->id));
# 2436|
# 2437| y_plane_state->ctl |= PLANE_CTL_YUV420_Y_PLANE;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3055:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3056:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3067:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: danger: dereference of NULL ‘display’
# 3068| return;
# 3069|
# 3070|-> drm_WARN_ON(display->drm, pipe != crtc->pipe);
# 3071|
# 3072| if (crtc_state->joiner_pipes) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3073:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3055:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3056:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3067:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3073:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3073:17: danger: dereference of NULL ‘display’
# 3071|
# 3072| if (crtc_state->joiner_pipes) {
# 3073|-> drm_dbg_kms(display->drm,
# 3074| "[CRTC:%d:%s] Unsupported joiner configuration for initial FB\n",
# 3075| crtc->base.base.id, crtc->base.name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3081:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3055:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3056:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3067:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3079:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3080:12: branch_true: following ‘true’ branch (when ‘intel_fb’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3081:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3081:17: danger: dereference of NULL ‘display’
# 3079| intel_fb = intel_framebuffer_alloc();
# 3080| if (!intel_fb) {
# 3081|-> drm_dbg_kms(display->drm, "failed to alloc fb\n");
# 3082| return;
# 3083| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3087:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3055:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3056:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3067:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3070:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3072:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3079:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3080:12: branch_false: following ‘false’ branch (when ‘intel_fb’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3085:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_universal_plane.c:3087:19: danger: dereference of NULL ‘display’
# 3085| fb = &intel_fb->base;
# 3086|
# 3087|-> fb->dev = display->drm;
# 3088|
# 3089| val = intel_de_read(display, PLANE_CTL(pipe, plane_id));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2136:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2910:1: enter_function: entry to ‘skl_compute_wm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2912:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2917:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2917:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2918:23: call_function: calling ‘skl_build_pipe_wm’ from ‘skl_compute_wm’
# 2134| const struct drm_framebuffer *fb = plane_state->hw.fb;
# 2135|
# 2136|-> drm_WARN_ON(display->drm,
# 2137| !intel_wm_plane_visible(crtc_state, plane_state));
# 2138| drm_WARN_ON(display->drm, !fb->format->is_yuv ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2138:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2910:1: enter_function: entry to ‘skl_compute_wm’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2912:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2917:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2917:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:2918:23: call_function: calling ‘skl_build_pipe_wm’ from ‘skl_compute_wm’
# 2136| drm_WARN_ON(display->drm,
# 2137| !intel_wm_plane_visible(crtc_state, plane_state));
# 2138|-> drm_WARN_ON(display->drm, !fb->format->is_yuv ||
# 2139| fb->format->num_planes == 1);
# 2140|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3451:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3456:13: enter_function: entry to ‘intel_mbus_dbox_update’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3458:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3461:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3461:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3464:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3464:26: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3464:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3466:12: branch_false: following ‘false’ branch (when ‘__mptr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3467:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3471:9: call_function: calling ‘pipe_mbus_dbox_ctl_update’ from ‘intel_mbus_dbox_update’
# 3449| struct intel_crtc *crtc;
# 3450|
# 3451|-> for_each_intel_crtc_in_pipe_mask(display->drm, crtc, dbuf_state->active_pipes)
# 3452| intel_de_write(display, PIPE_MBUS_DBOX_CTL(crtc->pipe),
# 3453| pipe_mbus_dbox_ctl(crtc, dbuf_state));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3506:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3520:13: enter_function: entry to ‘intel_dbuf_mdclk_min_tracker_update’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3522:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3524:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3524:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3524:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3537:9: call_function: calling ‘intel_dbuf_mdclk_cdclk_ratio_update’ from ‘intel_dbuf_mdclk_min_tracker_update’
# 3504| ratio *= 2;
# 3505|
# 3506|-> drm_dbg_kms(display->drm, "Updating dbuf ratio to %d (mbus joined: %s)\n",
# 3507| ratio, str_yes_no(joined_mbus));
# 3508|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3549:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3544:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3545:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3549:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3549:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3549:9: danger: dereference of NULL ‘display’
# 3547| struct intel_crtc *crtc;
# 3548|
# 3549|-> drm_WARN_ON(display->drm, !dbuf_state->joined_mbus);
# 3550| drm_WARN_ON(display->drm, !is_power_of_2(dbuf_state->active_pipes));
# 3551|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3550:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3544:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3545:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3549:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3550:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3550:9: danger: dereference of NULL ‘display’
# 3548|
# 3549| drm_WARN_ON(display->drm, !dbuf_state->joined_mbus);
# 3550|-> drm_WARN_ON(display->drm, !is_power_of_2(dbuf_state->active_pipes));
# 3551|
# 3552| crtc = intel_crtc_for_pipe(display, pipe);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3591:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3585:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3587:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3587:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3587:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3591:9: danger: dereference of NULL ‘display’
# 3589| intel_atomic_get_new_dbuf_state(state);
# 3590|
# 3591|-> drm_dbg_kms(display->drm, "Changing mbus joined: %s -> %s (pipe: %c)\n",
# 3592| str_yes_no(old_dbuf_state->joined_mbus),
# 3593| str_yes_no(new_dbuf_state->joined_mbus),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3907:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3874:6: enter_function: entry to ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3877:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3879:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3895:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3896:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: call_function: calling ‘skl_pipe_wm_get_hw_state’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: return_function: returning to ‘intel_wm_state_verify’ from ‘skl_pipe_wm_get_hw_state’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3903:29: call_function: calling ‘intel_enabled_dbuf_slices_mask’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3903:29: return_function: returning to ‘intel_wm_state_verify’ from ‘intel_enabled_dbuf_slices_mask’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3905:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3906:34: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3905:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3907:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3907:17: danger: dereference of NULL ‘display’
# 3905| if (DISPLAY_VER(display) >= 11 &&
# 3906| hw_enabled_slices != display->dbuf.enabled_slices)
# 3907|-> drm_err(display->drm,
# 3908| "mismatch in DBUF Slices (expected 0x%x, got 0x%x)\n",
# 3909| display->dbuf.enabled_slices,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3912:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3874:6: enter_function: entry to ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3877:41: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3879:17: call_function: inlined call to ‘intel_atomic_get_new_crtc_state’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3892:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3895:14: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3896:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: call_function: calling ‘skl_pipe_wm_get_hw_state’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3899:9: return_function: returning to ‘intel_wm_state_verify’ from ‘skl_pipe_wm_get_hw_state’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3903:29: call_function: calling ‘intel_enabled_dbuf_slices_mask’ from ‘intel_wm_state_verify’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3903:29: return_function: returning to ‘intel_wm_state_verify’ from ‘intel_enabled_dbuf_slices_mask’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/skl_watermark.c:3912:9: danger: dereference of NULL ‘display’
# 3910| hw_enabled_slices);
# 3911|
# 3912|-> for_each_intel_plane_on_crtc(display->drm, crtc, plane) {
# 3913| const struct skl_ddb_entry *hw_ddb_entry, *sw_ddb_entry;
# 3914| const struct skl_wm_level *hw_wm_level, *sw_wm_level;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:36:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:24:5: enter_function: entry to ‘vlv_dpio_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:26:41: branch_false: following ‘false’ branch (when ‘drm’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:27:38: call_function: inlined call to ‘vlv_dpio_phy_to_unit’ from ‘vlv_dpio_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:36:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:36:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/display/vlv_sideband.c:36:9: danger: dereference of NULL ‘display’
# 34| * so ideally we should check the register offset instead...
# 35| */
# 36|-> drm_WARN(display->drm, val == 0xffffffff,
# 37| "DPIO PHY%d read reg 0x%x == 0x%x\n",
# 38| phy, reg, val);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:91:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:328:5: enter_function: entry to ‘i915_gem_evict_for_node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:428:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:429:17: call_function: inlined call to ‘__i915_vma_unpin’ from ‘i915_gem_evict_for_node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:430:20: branch_true: following ‘true’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:431:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:433:17: call_function: calling ‘ungrab_vma’ from ‘i915_gem_evict_for_node’
# 89| return;
# 90|
# 91|-> i915_gem_object_unlock(vma->obj);
# 92| i915_gem_object_put(vma->obj);
# 93| }
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:92:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:328:5: enter_function: entry to ‘i915_gem_evict_for_node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:428:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:429:17: call_function: inlined call to ‘__i915_vma_unpin’ from ‘i915_gem_evict_for_node’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:430:20: branch_true: following ‘true’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:431:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/i915/i915_gem_evict.c:433:17: call_function: calling ‘ungrab_vma’ from ‘i915_gem_evict_for_node’
# 90|
# 91| i915_gem_object_unlock(vma->obj);
# 92|-> i915_gem_object_put(vma->obj);
# 93| }
# 94|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/falcon/base.c:66:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/falcon/base.c:56:1: enter_function: entry to ‘nvkm_falcon_dma_wr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/falcon/base.c:59:50: call_function: inlined call to ‘nvkm_falcon_dma’ from ‘nvkm_falcon_dma_wr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/falcon/base.c:66:13: danger: dereference of NULL ‘<unknown>’
# 64| int ret, i;
# 65|
# 66|-> if (WARN_ON(!dma->xfer))
# 67| return -EINVAL;
# 68|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:436:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘_fwif’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:425:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:427:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:432:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:433:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:436:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c:436:21: danger: dereference of NULL ‘_fwif’
# 434| return PTR_ERR(fwif);
# 435|
# 436|-> acr->func = fwif->func;
# 437|
# 438| wprfw = nvkm_longopt(device->cfgopt, "NvAcrWpr", -1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:497:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:565:12: enter_function: entry to ‘parse_gsc_layout’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:574:12: branch_false: following ‘false’ branch (when ‘size > 79’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:579:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:580:12: branch_false: following ‘false’ branch (when ‘size >= min_size’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:587:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:587:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:593:30: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:594:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:600:43: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:601:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:607:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:608:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:609:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:616:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:622:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:622:24: call_function: calling ‘parse_cpd_header’ from ‘parse_gsc_layout’
# 495|
# 496| if (header->header_length < sizeof(struct gsc_cpd_header_v2)) {
# 497|-> xe_gt_err(gt, "invalid CPD header length %u!\n", header->header_length);
# 498| return -EINVAL;
# 499| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:503:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:565:12: enter_function: entry to ‘parse_gsc_layout’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:574:12: branch_false: following ‘false’ branch (when ‘size > 79’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:579:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:580:12: branch_false: following ‘false’ branch (when ‘size >= min_size’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:587:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:587:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:593:30: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:594:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:600:43: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:601:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:607:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:608:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:609:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:616:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:622:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/xe/xe_uc_fw.c:622:24: call_function: calling ‘parse_cpd_header’ from ‘parse_gsc_layout’
# 501| min_size = header->header_length + sizeof(struct gsc_cpd_entry) * header->num_of_entries;
# 502| if (size < min_size) {
# 503|-> xe_gt_err(gt, "FW too small! %zu < %zu\n", size, min_size);
# 504| return -ENODATA;
# 505| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1304:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘region’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1277:1: enter_function: entry to ‘mshv_map_user_memory’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1286:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1287:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1286:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1290:24: call_function: inlined call to ‘get_current’ from ‘mshv_map_user_memory’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1296:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1299:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1299:15: call_function: calling ‘mshv_partition_create_region’ from ‘mshv_map_user_memory’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1299:15: return_function: returning to ‘mshv_map_user_memory’ from ‘mshv_partition_create_region’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1301:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1304:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/hv/mshv_root_main.c:1304:23: danger: use of uninitialized value ‘region’ here
# 1302| return ret;
# 1303|
# 1304|-> switch (region->type) {
# 1305| case MSHV_REGION_TYPE_MEM_PINNED:
# 1306| ret = mshv_prepare_pinned_region(region);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:413:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘reg_val’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:564:12: enter_function: entry to ‘smi330_write_raw’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:587:24: call_function: calling ‘smi330_set_sensor_config’ from ‘smi330_write_raw’
# 411| return ret;
# 412|
# 413|-> reg_val = smi330_field_prep(attr->mask, reg_val);
# 414| ret = regmap_update_bits(data->regmap, reg, attr->mask, reg_val);
# 415| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/erdma/erdma_qp.c:756:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ret’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/erdma/erdma_qp.c:731:5: enter_function: entry to ‘erdma_post_recv’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/erdma/erdma_qp.c:741:16: branch_false: following ‘false’ branch (when ‘wr’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/erdma/erdma_qp.c:750:9: call_function: inlined call to ‘spin_unlock_irqrestore’ from ‘erdma_post_recv’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/erdma/erdma_qp.c:756:16: danger: use of uninitialized value ‘ret’ here
# 754| usecs_to_jiffies(100));
# 755|
# 756|-> return ret;
# 757| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:327:24: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 325| {
# 326| /* protect against complete modifying */
# 327|-> struct iowait *wait = tx->wait;
# 328| callback_t complete = tx->complete;
# 329|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:328:20: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 326| /* protect against complete modifying */
# 327| struct iowait *wait = tx->wait;
# 328|-> callback_t complete = tx->complete;
# 329|
# 330| #ifdef CONFIG_HFI1_DEBUG_SDMA_ORDER
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1601:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1599| static inline u8 ahg_mode(struct sdma_txreq *tx)
# 1600| {
# 1601|-> return (tx->descp[0].qw[1] & SDMA_DESC1_HEADER_MODE_SMASK)
# 1602| >> SDMA_DESC1_HEADER_MODE_SHIFT;
# 1603| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1622:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1620| u16 i;
# 1621|
# 1622|-> if (tx->num_desc) {
# 1623| u8 skip = 0, mode = ahg_mode(tx);
# 1624|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1630:40: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1628| if (mode > SDMA_AHG_APPLY_UPDATE1)
# 1629| skip = mode >> 1;
# 1630|-> for (i = 1 + skip; i < tx->num_desc; i++)
# 1631| sdma_unmap_desc(dd, &tx->descp[i]);
# 1632| tx->num_desc = 0;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1631:46: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1629| skip = mode >> 1;
# 1630| for (i = 1 + skip; i < tx->num_desc; i++)
# 1631|-> sdma_unmap_desc(dd, &tx->descp[i]);
# 1632| tx->num_desc = 0;
# 1633| }
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1632:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1630| for (i = 1 + skip; i < tx->num_desc; i++)
# 1631| sdma_unmap_desc(dd, &tx->descp[i]);
# 1632|-> tx->num_desc = 0;
# 1633| }
# 1634| kfree(tx->coalesce_buf);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1634:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1632| tx->num_desc = 0;
# 1633| }
# 1634|-> kfree(tx->coalesce_buf);
# 1635| tx->coalesce_buf = NULL;
# 1636| /* kmalloc'ed descp */
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1635:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1633| }
# 1634| kfree(tx->coalesce_buf);
# 1635|-> tx->coalesce_buf = NULL;
# 1636| /* kmalloc'ed descp */
# 1637| if (unlikely(tx->desc_limit > ARRAY_SIZE(tx->descs))) {
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1637:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1635| tx->coalesce_buf = NULL;
# 1636| /* kmalloc'ed descp */
# 1637|-> if (unlikely(tx->desc_limit > ARRAY_SIZE(tx->descs))) {
# 1638| tx->desc_limit = ARRAY_SIZE(tx->descs);
# 1639| kfree(tx->descp);
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1638:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1636| /* kmalloc'ed descp */
# 1637| if (unlikely(tx->desc_limit > ARRAY_SIZE(tx->descs))) {
# 1638|-> tx->desc_limit = ARRAY_SIZE(tx->descs);
# 1639| kfree(tx->descp);
# 1640| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:1639:23: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3341:6: enter_function: entry to ‘sdma_unfreeze’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3346:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/infiniband/hw/hfi1/sdma.c:3347:17: call_function: calling ‘sdma_process_event’ from ‘sdma_unfreeze’
# 1637| if (unlikely(tx->desc_limit > ARRAY_SIZE(tx->descs))) {
# 1638| tx->desc_limit = ARRAY_SIZE(tx->descs);
# 1639|-> kfree(tx->descp);
# 1640| }
# 1641| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:621:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘fw_addr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:599:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:602:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:603:16: branch_false: following ‘false’ branch (when ‘rec’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:621:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:621:19: danger: use of uninitialized value ‘fw_addr’ here
# 619|
# 620| /* DF end address is the last address in the firmware blob */
# 621|-> *df_end = fw_addr + fw_len;
# 622|
# 623| return_ptr(fw_buf);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:868:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ac_end’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:832:16: enter_function: entry to ‘ili210x_firmware_update_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:843:17: call_function: calling ‘request_ihex_firmware’ from ‘ili210x_firmware_update_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:843:17: return_function: returning to ‘ili210x_firmware_update_store’ from ‘request_ihex_firmware’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:844:12: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:851:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:851:25: call_function: calling ‘ili251x_firmware_to_buffer’ from ‘ili210x_firmware_update_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:851:25: return_function: returning to ‘ili210x_firmware_update_store’ from ‘ili251x_firmware_to_buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:852:17: call_function: inlined call to ‘PTR_ERR_OR_ZERO’ from ‘ili210x_firmware_update_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:863:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/input/touchscreen/ili210x.c:868:25: danger: use of uninitialized value ‘ac_end’ here
# 866| ili210x_hardware_reset(priv->reset_gpio);
# 867|
# 868|-> error = ili210x_do_firmware_update(priv, fwbuf, ac_end, df_end);
# 869|
# 870| ili210x_hardware_reset(priv->reset_gpio);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/bcache/journal.c:863:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*keys.<U1a00>.keys’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/bcache/journal.c:885:6: enter_function: entry to ‘bch_journal_meta’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/bcache/journal.c:892:15: call_function: calling ‘bch_journal’ from ‘bch_journal_meta’
# 861| w = journal_wait_for_write(c, bch_keylist_nkeys(keys));
# 862|
# 863|-> memcpy(bset_bkey_last(w->data), keys->keys, bch_keylist_bytes(keys));
# 864| w->data->keys += bch_keylist_nkeys(keys);
# 865|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/dm-vdo-target.c:538:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘specs’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/dm-vdo-target.c:1896:12: enter_function: entry to ‘vdo_ctr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/dm-vdo-target.c:1906:12: branch_false: following ‘false’ branch (when ‘vdo’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/dm-vdo-target.c:1909:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/dm-vdo-target.c:1910:26: call_function: calling ‘update_existing_vdo’ from ‘vdo_ctr’
# 536| return result;
# 537|
# 538|-> for (i = 0; specs[i] != NULL; i++) {
# 539| result = parse_one_thread_config_spec(specs[i], config);
# 540| if (result != VDO_SUCCESS)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/encodings.c:973:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘partition’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/encodings.c:971:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/encodings.c:971:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/md/dm-vdo/encodings.c:973:16: danger: use of uninitialized value ‘partition’ here
# 971| VDO_ASSERT_LOG_ONLY(result == VDO_SUCCESS, "layout has expected partition: %u", id);
# 972|
# 973|-> return partition;
# 974| }
# 975|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:833:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘rdval’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:815:12: enter_function: entry to ‘ov5647_power_off’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:823:15: call_function: calling ‘ov5647_write_array’ from ‘ov5647_power_off’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:823:15: return_function: returning to ‘ov5647_power_off’ from ‘ov5647_write_array’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:829:15: call_function: calling ‘ov5647_read’ from ‘ov5647_power_off’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:829:15: return_function: returning to ‘ov5647_power_off’ from ‘ov5647_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/i2c/ov5647.c:833:15: danger: use of uninitialized value ‘rdval’ here
# 831| dev_dbg(dev, "software standby failed\n");
# 832|
# 833|-> rdval &= ~0x01;
# 834| ret = ov5647_write(&sensor->sd, OV5647_SW_STANDBY, rdval);
# 835| if (ret < 0)
Error: GCC_ANALYZER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:36:17: warning[-Wanalyzer-overlapping-buffers]: overlapping buffers passed as arguments to ‘__builtin_memcpy’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:267:5: enter_function: entry to ‘dvb_usb_device_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:282:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:287:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:287:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘dvb_usb_device_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:289:16: call_function: calling ‘dvb_usb_find_device’ from ‘dvb_usb_device_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:289:16: return_function: returning to ‘dvb_usb_device_init’ from ‘dvb_usb_find_device’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:290:12: branch_false: following ‘false’ branch (when ‘desc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:296:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/media/usb/dvb-usb/dvb-usb-init.c:310:15: call_function: calling ‘dvb_usb_init’ from ‘dvb_usb_device_init’
#the behavior of ‘__builtin_memcpy’ is undefined for overlapping buffers
# 34| adap->id = n;
# 35|
# 36|-> memcpy(&adap->props, &d->props.adapter[n], sizeof(struct dvb_usb_adapter_properties));
# 37|
# 38| for (o = 0; o < adap->props.num_frontends; o++) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((const struct <anonymous> *)set_tport)[2].x’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’
# 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask)
# 523| {
# 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact);
# 525| u32 oldmask = get_unaligned((u32 *)p_mask);
# 526|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(const struct <anonymous> *)&set_eth_14(D)->eth_addr_val[off_8(D)].x’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’
# 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask)
# 523| {
# 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact);
# 525| u32 oldmask = get_unaligned((u32 *)p_mask);
# 526|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:218:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:204:12: enter_function: entry to ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:211:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:213:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:217:25: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:218:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 216| phylink_set(modes, 25000baseCR_Full);
# 217| phylink_set(modes, 10000baseCR_Full);
# 218|-> __set_bit(PHY_INTERFACE_MODE_25GBASER, interfaces);
# 219| __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
# 220| } else {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:222:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:204:12: enter_function: entry to ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:211:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:213:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:221:25: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:222:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 220| } else {
# 221| phylink_set(modes, 10000baseCR_Full);
# 222|-> __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
# 223| }
# 224| } else if (id->cable_tech & TXGBE_SFF_DA_ACTIVE_CABLE) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:228:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:224:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:225:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:228:17: danger: use of uninitialized value ‘interfaces[0]’ here
# 226| phylink_set(modes, Autoneg);
# 227| phylink_set(modes, 25000baseCR_Full);
# 228|-> __set_bit(PHY_INTERFACE_MODE_25GBASER, interfaces);
# 229| } else {
# 230| if (id->com_25g_code == TXGBE_SFF_25GBASESR_CAPABLE ||
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:235:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:224:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:235:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 233| txgbe->link_port = PORT_FIBRE;
# 234| phylink_set(modes, 25000baseSR_Full);
# 235|-> __set_bit(PHY_INTERFACE_MODE_25GBASER, interfaces);
# 236| }
# 237| if (id->com_10g_code & TXGBE_SFF_10GBASESR_CAPABLE) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:240:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:204:12: enter_function: entry to ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:224:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:237:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:237:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:238:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:239:25: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:239:25: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:240:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 238| txgbe->link_port = PORT_FIBRE;
# 239| phylink_set(modes, 10000baseSR_Full);
# 240|-> __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
# 241| }
# 242| if (id->com_10g_code & TXGBE_SFF_10GBASELR_CAPABLE) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:245:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:204:12: enter_function: entry to ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:210:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:224:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:230:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:237:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:237:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:242:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:242:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:243:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:244:25: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:244:25: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_sfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:245:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 243| txgbe->link_port = PORT_FIBRE;
# 244| phylink_set(modes, 10000baseLR_Full);
# 245|-> __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
# 246| }
# 247| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:282:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:278:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:282:17: danger: use of uninitialized value ‘interfaces[0]’ here
# 280| phylink_set(modes, 40000baseCR4_Full);
# 281| phylink_set(modes, 10000baseCR_Full);
# 282|-> __set_bit(PHY_INTERFACE_MODE_XLGMII, interfaces);
# 283| __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
# 284| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:288:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:271:12: enter_function: entry to ‘txgbe_qsfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:286:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:287:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:287:17: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_qsfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:288:17: danger: use of uninitialized value ‘interfaces[0]’ here
# 286| txgbe->link_port = PORT_FIBRE;
# 287| phylink_set(modes, 40000baseSR4_Full);
# 288|-> __set_bit(PHY_INTERFACE_MODE_XLGMII, interfaces);
# 289| }
# 290| if (id->transceiver_type & TXGBE_SFF_ETHERNET_40G_LR4) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:293:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:271:12: enter_function: entry to ‘txgbe_qsfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:291:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:292:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:292:17: call_function: inlined call to ‘generic___set_bit’ from ‘txgbe_qsfp_to_linkmodes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:293:17: danger: use of uninitialized value ‘interfaces[0]’ here
# 291| txgbe->link_port = PORT_FIBRE;
# 292| phylink_set(modes, 40000baseLR4_Full);
# 293|-> __set_bit(PHY_INTERFACE_MODE_XLGMII, interfaces);
# 294| }
# 295| if (id->transceiver_type & TXGBE_SFF_ETHERNET_40G_ACTIVE) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:299:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:296:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:299:17: danger: use of uninitialized value ‘interfaces[0]’ here
# 297| phylink_set(modes, Autoneg);
# 298| phylink_set(modes, 40000baseCR4_Full);
# 299|-> __set_bit(PHY_INTERFACE_MODE_XLGMII, interfaces);
# 300| }
# 301| if (id->transceiver_type & TXGBE_SFF_ETHERNET_RSRVD) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:308:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:301:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:301:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:302:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:302:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:303:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:308:25: danger: use of uninitialized value ‘interfaces[0]’ here
# 306| phylink_set(modes, 25000baseCR_Full);
# 307| phylink_set(modes, 10000baseCR_Full);
# 308|-> __set_bit(PHY_INTERFACE_MODE_XLGMII, interfaces);
# 309| __set_bit(PHY_INTERFACE_MODE_25GBASER, interfaces);
# 310| __set_bit(PHY_INTERFACE_MODE_10GBASER, interfaces);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:834:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:831:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:834:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:834:16: danger: use of uninitialized value ‘pbus_value’ here
# 832| return ret;
# 833|
# 834|-> return (pbus_value & EN8811H_HWTRAP1_CKO) ? 50000000 : 25000000;
# 835| }
# 836|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:867:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:864:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:867:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:867:16: danger: use of uninitialized value ‘pbus_value’ here
# 865| return ret;
# 866|
# 867|-> return (pbus_value & EN8811H_CLK_CGM_CKO);
# 868| }
# 869|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1100:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1077:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1080:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1089:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1092:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1093:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1097:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1098:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1100:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/phy/air_en8811h.c:1100:9: danger: use of uninitialized value ‘pbus_value’ here
# 1098| if (ret < 0)
# 1099| return ret;
# 1100|-> linkmode_mod_bit(ETHTOOL_LINK_MODE_2500baseT_Full_BIT,
# 1101| phydev->lp_advertising,
# 1102| pbus_value & EN8811H_2P5G_LPA_2P5G);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<U1140>.tkip.iv32’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<U1140>.tkip.iv32’ here
# 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64));
# 916|
# 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
# 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
# 919|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<Uc280>.tkip.iv32’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<Uc280>.tkip.iv32’ here
# 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64));
# 916|
# 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
# 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
# 919|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/realtek/rtl8xxxu/core.c:4833:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mcs’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/realtek/rtl8xxxu/core.c:6065:13: enter_function: entry to ‘rtl8xxxu_c2hcmd_callback’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/realtek/rtl8xxxu/core.c:6079:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/realtek/rtl8xxxu/core.c:6080:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/wireless/realtek/rtl8xxxu/core.c:6105:25: call_function: calling ‘rtl8xxxu_update_ra_report’ from ‘rtl8xxxu_c2hcmd_callback’
# 4831| rarpt->txrate.flags |= RATE_INFO_FLAGS_MCS;
# 4832|
# 4833|-> rarpt->txrate.mcs = mcs;
# 4834| rarpt->txrate.nss = nss;
# 4835|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/platform/x86/hp/hp-wmi.c:467:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/platform/x86/hp/hp-wmi.c:2104:12: enter_function: entry to ‘hp_wmi_resume_handler’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/platform/x86/hp/hp-wmi.c:2122:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/platform/x86/hp/hp-wmi.c:2123:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/platform/x86/hp/hp-wmi.c:2123:17: call_function: calling ‘hp_wmi_rfkill2_refresh’ from ‘hp_wmi_resume_handler’
# 465| args->commandtype = query;
# 466| args->datasize = insize;
# 467|-> memcpy(args->data, buffer, flex_array_size(args, data, insize));
# 468|
# 469| ret = wmi_evaluate_method(HPWMI_BIOS_GUID, 0, mid, &input, &output);
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/scsi/sd.c:124:20: warning[-Wunused-variable]: ‘sd_probe_types’ defined but not used
# 124 | static const char *sd_probe_types[] = { "async", "sync" };
# | ^~~~~~~~~~~~~~
# 122| };
# 123|
# 124|-> static const char *sd_probe_types[] = { "async", "sync" };
# 125|
# 126| static char sd_probe_type[6] = "async";
Error: GCC_ANALYZER_WARNING (CWE-465):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/tb.c:198:16: warning[-Wanalyzer-deref-before-check]: check of ‘sw’ for NULL after already dereferencing it
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/tb.c:3081:13: enter_function: entry to ‘tb_restore_children’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/tb.c:3089:13: call_function: calling ‘tb_enable_clx’ from ‘tb_restore_children’
# 196| * out to be beneficial.
# 197| */
# 198|-> while (sw && tb_switch_depth(sw) > 1)
# 199| sw = tb_switch_parent(sw);
# 200|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:162:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘volume’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:213:13: enter_function: entry to ‘afs_break_some_callbacks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:223:18: call_function: calling ‘afs_lookup_volume_rcu’ from ‘afs_break_some_callbacks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:223:18: return_function: return of NULL to ‘afs_break_some_callbacks’ from ‘afs_lookup_volume_rcu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:224:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/afs/callback.c:225:17: call_function: calling ‘afs_break_volume_callback’ from ‘afs_break_some_callbacks’
# 160| __releases(RCU)
# 161| {
# 162|-> struct afs_server_list *slist = rcu_dereference(volume->servers);
# 163| unsigned int i, cb_v_break;
# 164|
Error: GCC_ANALYZER_WARNING (CWE-465):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/bio.c:839:29: warning[-Wanalyzer-deref-before-check]: check of ‘inode’ for NULL after already dereferencing it
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/bio.c:899:6: enter_function: entry to ‘btrfs_submit_bbio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/bio.c:906:17: call_function: calling ‘btrfs_submit_chunk’ from ‘btrfs_submit_bbio’
# 837| goto fail;
# 838| } else if (bbio->can_use_append ||
# 839|-> (btrfs_is_zoned(fs_info) && inode &&
# 840| inode->flags & BTRFS_INODE_NODATASUM)) {
# 841| ret = btrfs_alloc_dummy_sum(bbio);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:183:23: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3439:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3440:25: call_function: inlined call to ‘list_del_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3442:25: call_function: calling ‘btrfs_put_block_group’ from ‘btrfs_start_dirty_block_groups’
# 181| cache);
# 182|
# 183|-> kfree(cache->free_space_ctl);
# 184| btrfs_free_chunk_map(cache->physical_map);
# 185| kfree(cache);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3142:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3483:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3140| */
# 3141| spin_lock(&cache->lock);
# 3142|-> old_commit_used = cache->commit_used;
# 3143| used = cache->used;
# 3144| /* No change in used bytes, can safely skip it. */
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3149:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3483:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3147| return 0;
# 3148| }
# 3149|-> cache->commit_used = used;
# 3150| spin_unlock(&cache->lock);
# 3151|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3166:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3483:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3164| bi = btrfs_item_ptr_offset(leaf, path->slots[0]);
# 3165| btrfs_set_stack_block_group_used(&bgi, used);
# 3166|-> btrfs_set_stack_block_group_chunk_objectid(&bgi,
# 3167| cache->global_root_id);
# 3168| btrfs_set_stack_block_group_flags(&bgi, cache->flags);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3168:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3483:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3166| btrfs_set_stack_block_group_chunk_objectid(&bgi,
# 3167| cache->global_root_id);
# 3168|-> btrfs_set_stack_block_group_flags(&bgi, cache->flags);
# 3169| write_extent_buffer(leaf, &bgi, bi, sizeof(bgi));
# 3170| fail:
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3183:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3391:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3404:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3408:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3409:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3413:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3415:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3416:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3417:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3428:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3429:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3432:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/block-group.c:3483:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3181| if (ret < 0 && ret != -ENOENT) {
# 3182| spin_lock(&cache->lock);
# 3183|-> cache->commit_used = old_commit_used;
# 3184| spin_unlock(&cache->lock);
# 3185| }
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:631:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:746:5: enter_function: entry to ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:769:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:770:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:797:9: call_function: inlined call to ‘list_splice_tail’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:798:9: call_function: inlined call to ‘list_splice_tail’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:799:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:801:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:802:17: call_function: inlined call to ‘list_del_init’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:802:17: call_function: inlined call to ‘list_del_init’ from ‘btrfs_wait_ordered_extents’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/ordered-data.c:804:17: call_function: calling ‘btrfs_put_ordered_extent’ from ‘btrfs_wait_ordered_extents’
# 629| ASSERT(RB_EMPTY_NODE(&entry->rb_node));
# 630| btrfs_add_delayed_iput(entry->inode);
# 631|-> list_for_each_entry_safe(sum, tmp, &entry->list, list)
# 632| kvfree(sum);
# 633| kmem_cache_free(btrfs_ordered_extent_cache, entry);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:518:19: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4046:5: enter_function: entry to ‘btrfs_recover_relocation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4060:12: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4062:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4071:20: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4073:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4122:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4123:12: branch_false: following ‘false’ branch (when ‘rc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: call_function: calling ‘reloc_chunk_start’ from ‘btrfs_recover_relocation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: return_function: returning to ‘btrfs_recover_relocation’ from ‘reloc_chunk_start’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4129:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4132:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4137:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4142:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4176:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4179:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4179:9: call_function: calling ‘merge_reloc_roots’ from ‘btrfs_recover_relocation’
# 516| bool put_ref = false;
# 517|
# 518|-> if (rc && root->node) {
# 519| spin_lock(&rc->reloc_root_tree.lock);
# 520| rb_node = rb_simple_search(&rc->reloc_root_tree.rb_root,
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:521:44: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4046:5: enter_function: entry to ‘btrfs_recover_relocation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4060:12: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4062:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4071:20: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4073:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4122:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4123:12: branch_false: following ‘false’ branch (when ‘rc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: call_function: calling ‘reloc_chunk_start’ from ‘btrfs_recover_relocation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4128:15: return_function: returning to ‘btrfs_recover_relocation’ from ‘reloc_chunk_start’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4129:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4132:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4137:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4142:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4176:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4179:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/btrfs/relocation.c:4179:9: call_function: calling ‘merge_reloc_roots’ from ‘btrfs_recover_relocation’
# 519| spin_lock(&rc->reloc_root_tree.lock);
# 520| rb_node = rb_simple_search(&rc->reloc_root_tree.rb_root,
# 521|-> root->commit_root->start);
# 522| if (rb_node) {
# 523| node = rb_entry(rb_node, struct mapping_node, rb_node);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1814:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘oldest’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1788:1: enter_function: entry to ‘ceph_find_incompatible’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1805:25: call_function: calling ‘page_snap_context’ from ‘ceph_find_incompatible’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1805:25: return_function: returning to ‘ceph_find_incompatible’ from ‘page_snap_context’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1806:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1813:26: call_function: calling ‘get_oldest_context’ from ‘ceph_find_incompatible’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1813:26: return_function: return of NULL to ‘ceph_find_incompatible’ from ‘get_oldest_context’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ceph/addr.c:1814:34: danger: dereference of NULL ‘oldest’
# 1812| */
# 1813| oldest = get_oldest_context(inode, NULL, NULL);
# 1814|-> if (snapc->seq > oldest->seq) {
# 1815| /* not writeable -- return it for the caller to deal with */
# 1816| ceph_put_snap_context(oldest);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:574:33: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1910:13: enter_function: entry to ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: return_function: returning to ‘z_erofs_readahead’ from ‘z_erofs_pcluster_readmore’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: call_function: calling ‘readahead_folio’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: return_function: returning to ‘z_erofs_readahead’ from ‘readahead_folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: following ‘false’ branch (when ‘folio’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1926:16: branch_false: following ‘false’ branch (when ‘head’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
# 572| if (!pcl->compressed_bvecs[i].page) {
# 573| pcl->compressed_bvecs[i].page =
# 574|-> folio_page(folio ?: newfolio, 0);
# 575| spin_unlock(&pcl->lockref.lock);
# 576| continue;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:579:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1910:13: enter_function: entry to ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: return_function: returning to ‘z_erofs_readahead’ from ‘z_erofs_pcluster_readmore’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: call_function: calling ‘readahead_folio’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: return_function: returning to ‘z_erofs_readahead’ from ‘readahead_folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: following ‘false’ branch (when ‘folio’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1926:16: branch_false: following ‘false’ branch (when ‘head’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
# 577| }
# 578| spin_unlock(&pcl->lockref.lock);
# 579|-> folio_put(folio ?: newfolio);
# 580| }
# 581|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:1822:26: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:2529:12: enter_function: entry to ‘do_compat_epoll_pwait’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:2544:15: call_function: calling ‘do_epoll_wait’ from ‘do_compat_epoll_pwait’
# 1820| continue;
# 1821|
# 1822|-> events = epoll_put_uevent(revents, epi->event.data, events);
# 1823| if (!events) {
# 1824| list_add(&epi->rdllink, &txlist);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:1831:21: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:2529:12: enter_function: entry to ‘do_compat_epoll_pwait’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/eventpoll.c:2544:15: call_function: calling ‘do_epoll_wait’ from ‘do_compat_epoll_pwait’
# 1829| }
# 1830| res++;
# 1831|-> if (epi->event.events & EPOLLONESHOT)
# 1832| epi->event.events &= EP_PRIVATE_BITS;
# 1833| else if (!(epi->event.events & EPOLLET)) {
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:316:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3154:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3176:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3179:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3202:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: call_function: calling ‘__flush_nat_entry_set’ from ‘f2fs_flush_nat_entries’
# 314|
# 315| set_nat_flag(ne, IS_DIRTY, false);
# 316|-> set->entry_cnt--;
# 317| nm_i->nat_cnt[DIRTY_NAT]--;
# 318| nm_i->nat_cnt[RECLAIMABLE_NAT]++;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:316:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3154:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3176:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3179:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3202:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: call_function: calling ‘__flush_nat_entry_set’ from ‘f2fs_flush_nat_entries’
# 314|
# 315| set_nat_flag(ne, IS_DIRTY, false);
# 316|-> set->entry_cnt--;
# 317| nm_i->nat_cnt[DIRTY_NAT]--;
# 318| nm_i->nat_cnt[RECLAIMABLE_NAT]++;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3081:27: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3154:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3176:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3179:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3202:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: call_function: calling ‘__flush_nat_entry_set’ from ‘f2fs_flush_nat_entries’
# 3079| struct curseg_info *curseg = CURSEG_I(sbi, CURSEG_HOT_DATA);
# 3080| struct f2fs_journal *journal = curseg->journal;
# 3081|-> nid_t start_nid = set->set * NAT_ENTRY_PER_BLOCK;
# 3082| bool to_journal = true;
# 3083| struct f2fs_nat_block *nat_blk;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3093:51: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3154:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3176:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3179:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3202:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: call_function: calling ‘__flush_nat_entry_set’ from ‘f2fs_flush_nat_entries’
# 3091| */
# 3092| if (enabled_nat_bits(sbi, cpc) ||
# 3093|-> !__has_cursum_space(sbi, journal, set->entry_cnt, NAT_JOURNAL))
# 3094| to_journal = false;
# 3095|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3108:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3154:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3176:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3179:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3186:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3202:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/f2fs/node.c:3203:23: call_function: calling ‘__flush_nat_entry_set’ from ‘f2fs_flush_nat_entries’
# 3106|
# 3107| /* flush dirty nats in nat entry set */
# 3108|-> list_for_each_entry_safe(ne, cur, &set->entry_list, list) {
# 3109| struct f2fs_nat_entry *raw_ne;
# 3110| nid_t nid = nat_get_nid(ne);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:133:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘val’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:120:16: enter_function: entry to ‘fuse_conn_max_background_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:127:15: call_function: calling ‘fuse_conn_limit_write’ from ‘fuse_conn_max_background_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:127:15: return_function: returning to ‘fuse_conn_max_background_write’ from ‘fuse_conn_limit_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:129:12: branch_true: following ‘true’ branch (when ‘ret > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:130:40: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:130:40: call_function: calling ‘fuse_ctl_file_conn_get’ from ‘fuse_conn_max_background_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:130:40: return_function: returning to ‘fuse_conn_max_background_write’ from ‘fuse_ctl_file_conn_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:131:20: branch_true: following ‘true’ branch (when ‘fc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:132:25: call_function: inlined call to ‘spin_lock’ from ‘fuse_conn_max_background_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:133:25: danger: use of uninitialized value ‘val’ here
# 131| if (fc) {
# 132| spin_lock(&fc->bg_lock);
# 133|-> fc->max_background = val;
# 134| fc->blocked = fc->num_background >= fc->max_background;
# 135| if (!fc->blocked)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:178:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘val’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:162:16: enter_function: entry to ‘fuse_conn_congestion_threshold_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:170:15: call_function: calling ‘fuse_conn_limit_write’ from ‘fuse_conn_congestion_threshold_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:170:15: return_function: returning to ‘fuse_conn_congestion_threshold_write’ from ‘fuse_conn_limit_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:172:12: branch_false: following ‘false’ branch (when ‘ret > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:174:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:174:14: call_function: calling ‘fuse_ctl_file_conn_get’ from ‘fuse_conn_congestion_threshold_write’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:174:14: return_function: returning to ‘fuse_conn_congestion_threshold_write’ from ‘fuse_ctl_file_conn_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:175:12: branch_false: following ‘false’ branch (when ‘fc’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:178:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/control.c:178:9: danger: use of uninitialized value ‘val’ here
# 176| goto out;
# 177|
# 178|-> WRITE_ONCE(fc->congestion_threshold, val);
# 179| fuse_conn_put(fc);
# 180| out:
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:268:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2535:5: enter_function: entry to ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2539:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2540:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:29: branch_true: following ‘true’ branch (when ‘i != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2551:17: call_function: calling ‘fuse_dev_end_requests’ from ‘fuse_dev_release’
# 266| static void fuse_put_request(struct fuse_req *req)
# 267| {
# 268|-> struct fuse_conn *fc = req->fm->fc;
# 269|
# 270| if (refcount_dec_and_test(&req->count)) {
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:460:28: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2535:5: enter_function: entry to ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2539:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2540:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:29: branch_true: following ‘true’ branch (when ‘i != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2551:17: call_function: calling ‘fuse_dev_end_requests’ from ‘fuse_dev_release’
# 458| void fuse_request_end(struct fuse_req *req)
# 459| {
# 460|-> struct fuse_mount *fm = req->fm;
# 461| struct fuse_conn *fc = fm->fc;
# 462| struct fuse_iqueue *fiq = &fc->iq;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:507:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2535:5: enter_function: entry to ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2539:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2540:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:29: branch_true: following ‘true’ branch (when ‘i != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2551:17: call_function: calling ‘fuse_dev_end_requests’ from ‘fuse_dev_release’
# 505|
# 506| if (test_bit(FR_ASYNC, &req->flags))
# 507|-> req->args->end(fm, req->args, req->out.h.error);
# 508| put_request:
# 509| fuse_put_request(req);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:507:47: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2535:5: enter_function: entry to ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2539:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2540:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:29: branch_true: following ‘true’ branch (when ‘i != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2548:25: call_function: inlined call to ‘list_splice_init’ from ‘fuse_dev_release’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2547:52: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/fuse/dev.c:2551:17: call_function: calling ‘fuse_dev_end_requests’ from ‘fuse_dev_release’
# 505|
# 506| if (test_bit(FR_ASYNC, &req->flags))
# 507|-> req->args->end(fm, req->args, req->out.h.error);
# 508| put_request:
# 509| fuse_put_request(req);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:278:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:483:5: enter_function: entry to ‘gfs2_meta_buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:492:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:495:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:495:15: call_function: calling ‘gfs2_meta_read’ from ‘gfs2_meta_buffer’
# 276| flags &= ~DIO_WAIT;
# 277| } else {
# 278|-> bh->b_end_io = end_buffer_read_sync;
# 279| get_bh(bh);
# 280| bhs[num++] = bh;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:291:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:483:5: enter_function: entry to ‘gfs2_meta_buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:492:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:493:26: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:495:15: call_function: calling ‘gfs2_meta_read’ from ‘gfs2_meta_buffer’
# 289| brelse(bh);
# 290| } else {
# 291|-> bh->b_end_io = end_buffer_read_sync;
# 292| bhs[num++] = bh;
# 293| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/super.c:444:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/super.c:439:12: enter_function: entry to ‘gfs2_write_inode’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/super.c:443:45: call_function: inlined call to ‘gfs2_glock2aspace’ from ‘gfs2_write_inode’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/super.c:444:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/super.c:444:40: danger: dereference of NULL ‘<unknown>’
# 442| struct gfs2_sbd *sdp = GFS2_SB(inode);
# 443| struct address_space *metamapping = gfs2_glock2aspace(ip->i_gl);
# 444|-> struct backing_dev_info *bdi = inode_to_bdi(metamapping->host);
# 445| int ret = 0;
# 446| bool flush_all = (wbc->sync_mode == WB_SYNC_ALL || gfs2_is_jdata(ip));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jffs2/readinode.c:1316:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jffs2/readinode.c:1392:5: enter_function: entry to ‘jffs2_do_crccheck_inode’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jffs2/readinode.c:1398:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jffs2/readinode.c:1401:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jffs2/readinode.c:1405:15: call_function: calling ‘jffs2_do_read_inode_internal’ from ‘jffs2_do_crccheck_inode’
# 1314| }
# 1315| /* OK. We're happy */
# 1316|-> f->metadata = frag_first(&f->fragtree)->node;
# 1317| jffs2_free_node_frag(frag_first(&f->fragtree));
# 1318| f->fragtree = RB_ROOT;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:3249:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2714:5: enter_function: entry to ‘jfs_readdir’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2745:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2748:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2748:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2846:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2847:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2849:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2850:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2852:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2856:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2869:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2869:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2874:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/jfs/jfs_dtree.c:2874:27: call_function: calling ‘dtReadNext’ from ‘jfs_readdir’
# 3247|
# 3248| /* update parent page stack frame */
# 3249|-> parent->bn = bn;
# 3250| }
# 3251|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/netfs/read_retry.c:245:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘subreq’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/netfs/read_retry.c:258:6: enter_function: entry to ‘netfs_retry_reads’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/netfs/read_retry.c:272:9: call_function: calling ‘netfs_retry_read_subrequests’ from ‘netfs_retry_reads’
# 243| subreq = list_next_entry(subreq, rreq_link);
# 244| abandon:
# 245|-> list_for_each_entry_from(subreq, &stream->subrequests, rreq_link) {
# 246| if (!test_bit(NETFS_SREQ_FAILED, &subreq->flags) &&
# 247| !test_bit(NETFS_SREQ_NEED_RETRY, &subreq->flags))
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/nfs/blocklayout/extent_tree.c:131:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/nfs/blocklayout/extent_tree.c:361:5: enter_function: entry to ‘ext_tree_remove’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/nfs/blocklayout/extent_tree.c:368:15: call_function: calling ‘__ext_tree_remove’ from ‘ext_tree_remove’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/nfs/blocklayout/extent_tree.c:368:15: return_function: returning to ‘ext_tree_remove’ from ‘__ext_tree_remove’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/nfs/blocklayout/extent_tree.c:376:9: call_function: calling ‘__ext_put_deviceids’ from ‘ext_tree_remove’
# 129|
# 130| list_for_each_entry_safe(be, tmp, head, be_list) {
# 131|-> nfs4_put_deviceid_node(be->be_device);
# 132| kfree(be);
# 133| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:165:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:163:16: enter_function: entry to ‘o2nm_node_num_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:165:38: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_num_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:165:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:165:38: danger: dereference of NULL ‘<unknown>’
# 163| static ssize_t o2nm_node_num_show(struct config_item *item, char *page)
# 164| {
# 165|-> return sprintf(page, "%d\n", to_o2nm_node(item)->nd_num);
# 166| }
# 167|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:204:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:184:16: enter_function: entry to ‘o2nm_node_num_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:187:34: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_num_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:190:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:194:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:197:12: branch_false: following ‘false’ branch (when ‘tmp <= 254’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:204:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:204:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:204:14: danger: dereference of NULL ‘<unknown>’
# 202| * to connect to this node.. make sure that they've been set
# 203| * before writing the node attribute? */
# 204|-> if (!test_bit(O2NM_NODE_ATTR_ADDRESS, &node->nd_set_attributes) ||
# 205| !test_bit(O2NM_NODE_ATTR_PORT, &node->nd_set_attributes))
# 206| return -EINVAL; /* XXX */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:236:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:234:16: enter_function: entry to ‘o2nm_node_ipv4_port_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:236:38: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_ipv4_port_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:236:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:236:38: danger: dereference of NULL ‘<unknown>’
# 234| static ssize_t o2nm_node_ipv4_port_show(struct config_item *item, char *page)
# 235| {
# 236|-> return sprintf(page, "%u\n", ntohs(to_o2nm_node(item)->nd_ipv4_port));
# 237| }
# 238|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:257:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:239:16: enter_function: entry to ‘o2nm_node_ipv4_port_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:242:34: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_ipv4_port_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:244:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:247:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:250:12: branch_false: following ‘false’ branch (when ‘tmp != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:252:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:252:12: branch_false: following ‘false’ branch (when ‘tmp <= 65534’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:255:51: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:255:12: branch_false: following ‘false’ branch (when ‘c == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:257:30: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:257:9: danger: dereference of NULL ‘<unknown>’
# 255| if (test_and_set_bit(O2NM_NODE_ATTR_PORT, &node->nd_set_attributes))
# 256| return -EBUSY;
# 257|-> node->nd_ipv4_port = htons(tmp);
# 258|
# 259| return count;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:320:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:318:16: enter_function: entry to ‘o2nm_node_local_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:320:38: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_local_show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:320:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:320:16: danger: dereference of NULL ‘<unknown>’
# 318| static ssize_t o2nm_node_local_show(struct config_item *item, char *page)
# 319| {
# 320|-> return sprintf(page, "%d\n", to_o2nm_node(item)->nd_local);
# 321| }
# 322|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:340:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:323:16: enter_function: entry to ‘o2nm_node_local_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:326:34: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_local_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:329:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:333:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:340:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:340:14: danger: dereference of NULL ‘<unknown>’
# 338| /* setting local turns on networking rx for now so we require having
# 339| * set everything else first */
# 340|-> if (!test_bit(O2NM_NODE_ATTR_ADDRESS, &node->nd_set_attributes) ||
# 341| !test_bit(O2NM_NODE_ATTR_NUM, &node->nd_set_attributes) ||
# 342| !test_bit(O2NM_NODE_ATTR_PORT, &node->nd_set_attributes))
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:609:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:603:13: enter_function: entry to ‘o2nm_node_group_drop_item’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:606:34: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_group_drop_item’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:607:40: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:609:31: danger: dereference of NULL ‘<unknown>’
# 607| struct o2nm_cluster *cluster = to_o2nm_cluster(group->cg_item.ci_parent);
# 608|
# 609|-> if (cluster->cl_nodes[node->nd_num] == node) {
# 610| o2net_disconnect_node(node);
# 611|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:393:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘new_fe_bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:230:12: enter_function: entry to ‘ocfs2_mknod’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:237:29: release_memory: ‘parent_fe_bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:242:29: release_memory: ‘parent_fe_bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:265:12: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:271:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:274:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:274:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:286:12: branch_false: following ‘false’ branch (when ‘nlink != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:293:44: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:294:12: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:300:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:301:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:307:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:308:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:314:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:314:17: call_function: calling ‘ocfs2_get_init_inode’ from ‘ocfs2_mknod’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:314:17: return_function: returning to ‘ocfs2_mknod’ from ‘ocfs2_get_init_inode’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:315:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:323:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:337:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:343:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:352:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:358:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:359:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:365:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:368:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:376:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:380:12: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:385:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:388:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:393:47: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:393:47: release_memory: ‘new_fe_bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/namei.c:393:9: danger: dereference of NULL ‘new_fe_bh’
# 391| }
# 392|
# 393|-> fe = (struct ocfs2_dinode *) new_fe_bh->b_data;
# 394| if (S_ISDIR(mode)) {
# 395| status = ocfs2_fill_new_dir(osb, handle, dir, inode,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:358:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hbh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:682:12: enter_function: entry to ‘ocfs2_local_read_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:689:29: release_memory: ‘bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:696:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:702:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:706:9: release_memory: using NULL here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:707:9: release_memory: using NULL here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:710:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:714:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:715:12: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:722:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:723:12: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:729:55: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:737:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:738:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:749:26: call_function: calling ‘ocfs2_recovery_load_quota’ from ‘ocfs2_local_read_info’
# 356| break;
# 357| }
# 358|-> dchunk = (struct ocfs2_local_disk_chunk *)hbh->b_data;
# 359| if (le32_to_cpu(dchunk->dqc_free) < ol_chunk_entries(sb))
# 360| status = ocfs2_add_recovery_chunk(sb, dchunk, i, head);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:486:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hbh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:457:12: enter_function: entry to ‘ocfs2_recover_local_quota_file’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:476:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:477:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:478:17: release_memory: ‘hbh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:479:26: call_function: calling ‘ocfs2_read_quota_block’ from ‘ocfs2_recover_local_quota_file’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:479:26: return_function: returning to ‘ocfs2_recover_local_quota_file’ from ‘ocfs2_read_quota_block’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:482:20: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:486:62: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:486:62: release_memory: ‘hbh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:486:17: danger: dereference of NULL ‘hbh’
# 484| break;
# 485| }
# 486|-> dchunk = (struct ocfs2_local_disk_chunk *)hbh->b_data;
# 487| for_each_set_bit(bit, rchunk->rc_bitmap, ol_chunk_entries(sb)) {
# 488| qbh = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:633:61: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:584:5: enter_function: entry to ‘ocfs2_finish_quota_recovery’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:601:24: branch_true: following ‘true’ branch (when ‘type != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:602:33: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:606:20: branch_false: following ‘false’ branch (when ‘lqinode’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:610:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:614:20: branch_false: following ‘false’ branch (when ‘status != -11’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:620:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:620:27: branch_false: following ‘false’ branch (when ‘status >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:625:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:625:17: release_memory: ‘bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:626:26: call_function: calling ‘ocfs2_read_quota_block’ from ‘ocfs2_finish_quota_recovery’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:626:26: return_function: returning to ‘ocfs2_finish_quota_recovery’ from ‘ocfs2_read_quota_block’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:627:20: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:633:63: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:633:63: release_memory: ‘bh’ is NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/quota_local.c:633:61: danger: dereference of NULL ‘bh’
# 631| goto out_lock;
# 632| }
# 633|-> ldinfo = (struct ocfs2_local_disk_dqinfo *)(bh->b_data +
# 634| OCFS2_LOCAL_INFO_OFF);
# 635| /* Is recovery still needed? */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:530:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:712:5: enter_function: entry to ‘ocfs2_resmap_resv_bits’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:716:12: branch_false: following ‘false’ branch (when ‘resv’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:716:29: call_function: inlined call to ‘ocfs2_resmap_disabled’ from ‘ocfs2_resmap_resv_bits’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:719:9: call_function: inlined call to ‘spin_lock’ from ‘ocfs2_resmap_resv_bits’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:721:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:727:39: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/reservations.c:739:17: call_function: calling ‘ocfs2_resv_find_window’ from ‘ocfs2_resmap_resv_bits’
# 528| * comment above
# 529| */
# 530|-> if (next_resv->r_start <= goal) {
# 531| mlog(ML_ERROR, "goal: %u next_resv: start %u len %u\n",
# 532| goal, next_resv->r_start, next_resv->r_len);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1179:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1205:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: danger: out-of-bounds read at byte 68 but ‘list’ ends at byte 16
# 1209| struct dentry *dentry;
# 1210|
# 1211|-> if (p->name[0] == '.') {
# 1212| if (p->len == 1)
# 1213| continue;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1212:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1179:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1205:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1212:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1212:29: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1210|
# 1211| if (p->name[0] == '.') {
# 1212|-> if (p->len == 1)
# 1213| continue;
# 1214| if (p->len == 2 && p->name[1] == '.')
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1214:44: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1179:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1205:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1212:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1214:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1214:44: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1214:44: danger: out-of-bounds read at byte 69 but ‘list’ ends at byte 16
# 1212| if (p->len == 1)
# 1213| continue;
# 1214|-> if (p->len == 2 && p->name[1] == '.')
# 1215| continue;
# 1216| } else if (incompat) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1222:80: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1179:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1204:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1205:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1208:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1211:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1216:27: branch_false: following ‘false’ branch (when ‘incompat == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1222:80: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1222:80: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1220| break;
# 1221| }
# 1222|-> dentry = ovl_lookup_upper_unlocked(ofs, p->name, path->dentry, p->len);
# 1223| if (IS_ERR(dentry))
# 1224| continue;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1261:5: enter_function: entry to ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1276:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: danger: out-of-bounds read at byte 68 but ‘list’ ends at byte 16
# 1278|
# 1279| list_for_each_entry(p, &list, l_node) {
# 1280|-> if (p->name[0] == '.') {
# 1281| if (p->len == 1)
# 1282| continue;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1281:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1261:5: enter_function: entry to ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1276:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1281:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1281:29: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1279| list_for_each_entry(p, &list, l_node) {
# 1280| if (p->name[0] == '.') {
# 1281|-> if (p->len == 1)
# 1282| continue;
# 1283| if (p->len == 2 && p->name[1] == '.')
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1283:44: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1261:5: enter_function: entry to ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1276:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1281:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1283:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1283:44: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1283:44: danger: out-of-bounds read at byte 69 but ‘list’ ends at byte 16
# 1281| if (p->len == 1)
# 1282| continue;
# 1283|-> if (p->len == 2 && p->name[1] == '.')
# 1284| continue;
# 1285| }
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1286:75: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1261:5: enter_function: entry to ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1275:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1276:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1279:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1280:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/readdir.c:1286:75: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1284| continue;
# 1285| }
# 1286|-> index = ovl_lookup_upper_unlocked(ofs, p->name, indexdir, p->len);
# 1287| if (IS_ERR(index)) {
# 1288| err = PTR_ERR(index);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:711:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*ea.next_entry_offset’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1001:1: enter_function: entry to ‘smb_set_file_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1021:12: branch_false: following ‘false’ branch (when ‘open_file’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1026:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1027:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1032:24: call_function: inlined call to ‘tlink_tcon’ from ‘smb_set_file_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1043:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1044:15: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/smb/client/smb1ops.c:1046:22: call_function: calling ‘cifs_query_path_info’ from ‘smb_set_file_info’
# 709| do {
# 710| ea = (void *)((u8 *)ea + next);
# 711|-> next = le32_to_cpu(ea->next_entry_offset);
# 712| } while (next);
# 713| if (le16_to_cpu(ea->ea_value_length)) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:126:27: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘blocks_in_level[level]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:30:5: enter_function: entry to ‘fsverity_init_merkle_tree_params’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:43:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fsverity_init_merkle_tree_params’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:43:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:46:12: branch_false: following ‘false’ branch (when ‘hash_alg’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:48:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:51:12: branch_false: following ‘false’ branch (when ‘salt_size == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:75:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:75:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:76:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:75:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:82:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:91:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:98:34: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:98:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:98:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:98:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:98:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:100:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:100:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:111:16: branch_false: following ‘false’ branch (when ‘blocks <= 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:124:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:124:51: branch_true: following ‘true’ branch (when ‘level >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:125:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/verity/open.c:126:27: danger: use of uninitialized value ‘blocks_in_level[level]’ here
# 124| for (level = (int)params->num_levels - 1; level >= 0; level--) {
# 125| params->level_start[level] = offset;
# 126|-> offset += blocks_in_level[level];
# 127| }
# 128|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1574:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘index’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1548:1: enter_function: entry to ‘xfs_dir2_leaf_replace’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1566:17: call_function: calling ‘xfs_dir2_leaf_lookup_int’ from ‘xfs_dir2_leaf_replace’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1566:17: return_function: returning to ‘xfs_dir2_leaf_replace’ from ‘xfs_dir2_leaf_lookup_int’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1567:12: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1570:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/libxfs/xfs_dir2_leaf.c:1574:28: danger: use of uninitialized value ‘index’ here
# 1572| * Point to the leaf entry, get data address from it.
# 1573| */
# 1574|-> lep = &leafhdr.ents[index];
# 1575| /*
# 1576| * Point to the data entry.
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/xfs_exchmaps_item.c:233:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/xfs_exchmaps_item.c:227:15: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/xfs_exchmaps_item.c:230:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/xfs/xfs_exchmaps_item.c:233:27: danger: dereference of NULL ‘<unknown>’
# 231| xlf = &xmi_lip->xmi_format;
# 232|
# 233|-> xlf->xmi_inode1 = xmi->xmi_ip1->i_ino;
# 234| xlf->xmi_igen1 = VFS_I(xmi->xmi_ip1)->i_generation;
# 235| xlf->xmi_inode2 = xmi->xmi_ip2->i_ino;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/acpi/acpi_bus.h:563:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:240:12: enter_function: entry to ‘acpi_smbus_hc_add’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:246:12: branch_false: following ‘false’ branch (when ‘device’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:249:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:250:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:255:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:259:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:261:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:264:18: call_function: inlined call to ‘acpi_dev_parent’ from ‘acpi_smbus_hc_add’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/acpi/sbshc.c:264:18: call_function: inlined call to ‘acpi_driver_data’ from ‘acpi_smbus_hc_add’
# 561| static inline void *acpi_driver_data(struct acpi_device *d)
# 562| {
# 563|-> return d->driver_data;
# 564| }
# 565|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/crypto/utils.h:26:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:693:19: enter_function: entry to ‘libaesgcm_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:695:25: branch_true: following ‘true’ branch (when ‘i != 13’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:696:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:701:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:709:54: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:707:22: call_function: calling ‘aesgcm_decrypt’ from ‘libaesgcm_init’
# 24|
# 25| while (size > 0) {
# 26|-> l = get_unaligned(d) ^ get_unaligned(s++);
# 27| put_unaligned(l, d++);
# 28| size -= sizeof(unsigned long);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/crypto/utils.h:26:48: warning[-Wanalyzer-out-of-bounds]: buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:693:19: enter_function: entry to ‘libaesgcm_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:695:25: branch_true: following ‘true’ branch (when ‘i != 13’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:696:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:701:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:709:54: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:707:22: call_function: calling ‘aesgcm_decrypt’ from ‘libaesgcm_init’
# 24|
# 25| while (size > 0) {
# 26|-> l = get_unaligned(d) ^ get_unaligned(s++);
# 27| put_unaligned(l, d++);
# 28| size -= sizeof(unsigned long);
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/crypto/utils.h:27:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:693:19: enter_function: entry to ‘libaesgcm_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:695:25: branch_true: following ‘true’ branch (when ‘i != 13’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:696:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:701:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:709:54: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/aesgcm.c:707:22: call_function: calling ‘aesgcm_decrypt’ from ‘libaesgcm_init’
# 25| while (size > 0) {
# 26| l = get_unaligned(d) ^ get_unaligned(s++);
# 27|-> put_unaligned(l, d++);
# 28| size -= sizeof(unsigned long);
# 29| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:95:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 93| drm_buddy_block_offset(const struct drm_buddy_block *block)
# 94| {
# 95|-> return block->header & DRM_BUDDY_HEADER_OFFSET;
# 96| }
# 97|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:95:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 93| drm_buddy_block_offset(const struct drm_buddy_block *block)
# 94| {
# 95|-> return block->header & DRM_BUDDY_HEADER_OFFSET;
# 96| }
# 97|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:101:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/tests/drm_buddy_test.c:843:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/tests/drm_buddy_test.c:844:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/tests/drm_buddy_test.c:844:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/tests/drm_buddy_test.c:844:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/tests/drm_buddy_test.c:846:9: call_function: inlined call to ‘drm_buddy_block_order’ from ‘drm_test_buddy_alloc_limit’
# 99| drm_buddy_block_order(struct drm_buddy_block *block)
# 100| {
# 101|-> return block->header & DRM_BUDDY_HEADER_ORDER;
# 102| }
# 103|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:101:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 99| drm_buddy_block_order(struct drm_buddy_block *block)
# 100| {
# 101|-> return block->header & DRM_BUDDY_HEADER_ORDER;
# 102| }
# 103|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:107:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 105| drm_buddy_block_state(struct drm_buddy_block *block)
# 106| {
# 107|-> return block->header & DRM_BUDDY_HEADER_STATE;
# 108| }
# 109|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:119:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘block’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2400:5: enter_function: entry to ‘amdgpu_ttm_clear_buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2410:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2413:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2413:12: branch_false: following ‘false’ branch (when ‘fence’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2416:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2421:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2422:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:2425:21: call_function: inlined call to ‘amdgpu_res_cleared’ from ‘amdgpu_ttm_clear_buffer’
# 117| drm_buddy_block_is_clear(struct drm_buddy_block *block)
# 118| {
# 119|-> return block->header & DRM_BUDDY_HEADER_CLEAR;
# 120| }
# 121|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/drm/drm_buddy.h:119:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1104:5: enter_function: entry to ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1117:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1120:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1123:14: call_function: inlined call to ‘is_power_of_2’ from ‘drm_buddy_alloc_blocks’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1126:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1129:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1132:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1136:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1137:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/drm_buddy.c:1140:24: call_function: calling ‘__drm_buddy_alloc_range’ from ‘drm_buddy_alloc_blocks’
# 117| drm_buddy_block_is_clear(struct drm_buddy_block *block)
# 118| {
# 119|-> return block->header & DRM_BUDDY_HEADER_CLEAR;
# 120| }
# 121|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/bitmap.h:338:32: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(const long unsigned int *)(&allowed_feature_mask[0])’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:693:12: enter_function: entry to ‘smu_get_driver_allowed_feature_mask’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:706:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:711:9: call_function: inlined call to ‘bitmap_zero’ from ‘smu_get_driver_allowed_feature_mask’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:713:15: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:713:15: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:713:15: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c:720:23: branch_false: ...to here
# 336| {
# 337| if (small_const_nbits(nbits))
# 338|-> *dst = *src1 | *src2;
# 339| else
# 340| __bitmap_or(dst, src1, src2, nbits);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/bitmap.h:442:27: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘interfaces[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:277:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:285:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:290:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:295:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:301:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c:314:13: call_function: inlined call to ‘phy_interface_empty’ from ‘txgbe_qsfp_to_linkmodes’
# 440| {
# 441| if (small_const_nbits(nbits))
# 442|-> return ! (*src & BITMAP_LAST_WORD_MASK(nbits));
# 443|
# 444| return find_first_bit(src, nbits) == nbits;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/blkdev.h:1044:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1762:16: enter_function: entry to ‘o2hb_region_dev_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1774:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1779:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1779:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1782:15: call_function: inlined call to ‘kstrtol’ from ‘o2hb_region_dev_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1783:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1786:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1786:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1789:9: call_function: inlined call to ‘class_fd_constructor’ from ‘o2hb_region_dev_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1790:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1793:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1793:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1797:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1800:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1802:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1808:20: call_function: inlined call to ‘reg_bdev’ from ‘o2hb_region_dev_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/heartbeat.c:1808:20: call_function: inlined call to ‘bdev_logical_block_size’ from ‘o2hb_region_dev_store’
# 1042| static inline struct request_queue *bdev_get_queue(struct block_device *bdev)
# 1043| {
# 1044|-> return bdev->bd_queue; /* this is never NULL */
# 1045| }
# 1046|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/buffer_head.h:172:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:483:5: enter_function: entry to ‘gfs2_meta_buffer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:492:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:495:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:495:15: call_function: calling ‘gfs2_meta_read’ from ‘gfs2_meta_buffer’
# 170| * pairs with smp_mb__before_atomic in set_buffer_uptodate
# 171| */
# 172|-> return test_bit_acquire(BH_Uptodate, &bh->b_state);
# 173| }
# 174|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/buffer_head.h:172:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘first_bh’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:514:21: enter_function: entry to ‘gfs2_meta_ra’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:521:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:523:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:528:20: call_function: calling ‘gfs2_getbuf’ from ‘gfs2_meta_ra’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/gfs2/meta_io.c:528:20: return_function: return of NULL to ‘gfs2_meta_ra’ from ‘gfs2_getbuf’
# 170| * pairs with smp_mb__before_atomic in set_buffer_uptodate
# 171| */
# 172|-> return test_bit_acquire(BH_Uptodate, &bh->b_state);
# 173| }
# 174|
Error: GCC_ANALYZER_WARNING (CWE-131):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/byteorder/generic.h:236:20: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:222:25: enter_function: entry to ‘tb_property_parse_dir’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:228:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:230:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:230:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:233:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/thunderbolt/property.c:233:16: call_function: calling ‘__tb_property_parse_dir’ from ‘tb_property_parse_dir’
# 234|
# 235| for (i = 0; i < len; i++)
# 236|-> dst[i] = be32_to_cpu(src[i]);
# 237| }
# 238|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/dcache.h:534:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘connected’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/export.c:489:23: enter_function: entry to ‘ovl_lookup_real_ancestor’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/overlayfs/export.c:508:28: call_function: calling ‘ovl_lookup_real_inode’ from ‘ovl_lookup_real_ancestor’
# 532| static inline struct inode *d_inode(const struct dentry *dentry)
# 533| {
# 534|-> return dentry->d_inode;
# 535| }
# 536|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/dma-fence.h:451:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fence’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7635:19: enter_function: entry to ‘amdgpu_device_enforce_isolation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7658:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7673:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7680:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7680:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7681:31: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7682:30: call_function: calling ‘dma_fence_is_signaled’ from ‘amdgpu_device_enforce_isolation’
# 449| dma_fence_is_signaled(struct dma_fence *fence)
# 450| {
# 451|-> if (test_bit(DMA_FENCE_FLAG_SIGNALED_BIT, &fence->flags))
# 452| return true;
# 453|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/err.h:78:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘entity’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/scheduler/sched_main.c:1096:1: enter_function: entry to ‘drm_sched_select_entity’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/scheduler/sched_main.c:1103:45: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/scheduler/sched_main.c:1111:16: call_function: inlined call to ‘IS_ERR’ from ‘drm_sched_select_entity’
# 76| static inline bool __must_check IS_ERR(__force const void *ptr)
# 77| {
# 78|-> return IS_ERR_VALUE((unsigned long)ptr);
# 79| }
# 80|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/fortify-string.h:297:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘name’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1946:1: enter_function: entry to ‘cdv_intel_dp_init’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1957:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1959:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1960:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1962:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1963:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:1966:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/gpu/drm/gma500/cdv_intel_dp.c:2008:9: call_function: calling ‘cdv_intel_dp_i2c_init’ from ‘cdv_intel_dp_init’
# 295| /* Short-circuit for compile-time known-safe lengths. */
# 296| if (__compiletime_lessthan(p_size, SIZE_MAX)) {
# 297|-> len = __compiletime_strlen(q);
# 298|
# 299| if (len < SIZE_MAX && __compiletime_lessthan(len, size)) {
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/fortify-string.h:748:17: error[error]: call to '__read_overflow' declared with attribute error: detected read beyond size of object (1st parameter)
# 746|
# 747| if (__compiletime_lessthan(p_size, size))
# 748|-> __read_overflow();
# 749| if (p_size < size)
# 750| fortify_panic(FORTIFY_FUNC_memchr_inv, FORTIFY_READ, p_size, size, NULL);
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/fortify-string.h:795:24: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:633:31: enter_function: entry to ‘fanotify_alloc_name_event’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:644:30: branch_true: following ‘true’ branch (when ‘moved’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:644:46: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:650:35: branch_true: following ‘true’ branch (when ‘name2’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:650:43: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:662:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:665:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:689:12: branch_true: following ‘true’ branch (when ‘name2_len != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:690:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/notify/fanotify/fanotify.c:690:17: call_function: calling ‘fanotify_info_copy_name2’ from ‘fanotify_alloc_name_event’
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 793| __builtin_constant_p(q_size) &&
# 794| p_size == SIZE_MAX && q_size == SIZE_MAX)
# 795|-> return __underlying_strcpy(p, q);
# 796| size = strlen(q) + 1;
# 797| /* Compile-time check for const size overflow. */
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/fortify-string.h:799:17: error[error]: call to '__write_overflow' declared with attribute error: detected write beyond size of object (1st parameter)
# 797| /* Compile-time check for const size overflow. */
# 798| if (__compiletime_lessthan(p_size, size))
# 799|-> __write_overflow();
# 800| /* Run-time check for dynamic size overflow. */
# 801| if (p_size < size)
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/jhash.h:80:22: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/chelsio/cxgb4/cxgb4_tc_flower.c:996:5: enter_function: entry to ‘cxgb4_tc_flower_destroy’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/net/ethernet/chelsio/cxgb4/cxgb4_tc_flower.c:1003:21: call_function: calling ‘ch_flower_lookup’ from ‘cxgb4_tc_flower_destroy’
# 78| /* All but the last block: affect some 32 bits of (a,b,c) */
# 79| while (length > 12) {
# 80|-> a += get_unaligned((u32 *)k);
# 81| b += get_unaligned((u32 *)(k + 4));
# 82| c += get_unaligned((u32 *)(k + 8));
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/page-flags.h:220:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/virtio/virtio_balloon.c:1103:13: enter_function: entry to ‘remove_common’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/virtio/virtio_balloon.c:1106:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/virtio/virtio_balloon.c:1107:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/virtio/virtio_balloon.c:1107:17: call_function: calling ‘leak_balloon’ from ‘remove_common’
# 218| */
# 219| if (IS_ALIGNED((unsigned long)page, PAGE_SIZE) &&
# 220|-> test_bit(PG_head, &page->flags.f)) {
# 221| /*
# 222| * We can safely access the field of the @page[1] with PG_head
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/page-flags.h:284:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘page’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1478:13: enter_function: entry to ‘dmirror_fops_unlocked_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1488:12: branch_false: following ‘false’ branch (when ‘dmirror’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1491:13: call_function: inlined call to ‘copy_from_user’ from ‘dmirror_fops_unlocked_ioctl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1491:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1494:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1494:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1496:38: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1496:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1499:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/test_hmm.c:1512:23: call_function: calling ‘dmirror_migrate_to_device’ from ‘dmirror_fops_unlocked_ioctl’
# 282| static __always_inline unsigned long _compound_head(const struct page *page)
# 283| {
# 284|-> unsigned long head = READ_ONCE(page->compound_head);
# 285|
# 286| if (unlikely(head & 1))
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/page-flags.h:284:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ptr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1910:13: enter_function: entry to ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: return_function: returning to ‘z_erofs_readahead’ from ‘z_erofs_pcluster_readmore’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: call_function: calling ‘readahead_folio’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: return_function: returning to ‘z_erofs_readahead’ from ‘readahead_folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: following ‘false’ branch (when ‘folio’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1926:16: branch_false: following ‘false’ branch (when ‘head’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1935:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
# 282| static __always_inline unsigned long _compound_head(const struct page *page)
# 283| {
# 284|-> unsigned long head = READ_ONCE(page->compound_head);
# 285|
# 286| if (unlikely(head & 1))
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/page_ref.h:205:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1910:13: enter_function: entry to ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: call_function: calling ‘z_erofs_pcluster_readmore’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1919:9: return_function: returning to ‘z_erofs_readahead’ from ‘z_erofs_pcluster_readmore’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: call_function: calling ‘readahead_folio’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: return_function: returning to ‘z_erofs_readahead’ from ‘readahead_folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_true: following ‘true’ branch (when ‘folio’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1921:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: call_function: calling ‘readahead_folio’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:25: return_function: returning to ‘z_erofs_readahead’ from ‘readahead_folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: following ‘false’ branch (when ‘folio’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1920:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1926:16: branch_true: following ‘true’ branch (when ‘head’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1928:24: call_function: inlined call to ‘folio_get_private’ from ‘z_erofs_readahead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/erofs/zdata.c:1930:23: call_function: calling ‘z_erofs_scan_folio’ from ‘z_erofs_readahead’
# 203| static inline int page_ref_dec_and_test(struct page *page)
# 204| {
# 205|-> int ret = atomic_dec_and_test(&page->_refcount);
# 206|
# 207| if (page_ref_tracepoint_active(page_ref_mod_and_test))
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/rbtree.h:90:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:267:16: enter_function: entry to ‘o2nm_node_ipv4_address_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:271:34: call_function: inlined call to ‘to_o2nm_node’ from ‘o2nm_node_ipv4_address_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:274:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:280:12: branch_false: following ‘false’ branch (when ‘ret == 4’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:280:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:283:21: branch_true: following ‘true’ branch (when ‘i != 4’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:284:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:284:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:286:55: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:284:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:286:55: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:290:19: call_function: inlined call to ‘to_o2nm_cluster_from_node’ from ‘o2nm_node_ipv4_address_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:291:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:297:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:298:13: call_function: calling ‘o2nm_node_ip_tree_lookup’ from ‘o2nm_node_ipv4_address_store’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:298:13: return_function: returning to ‘o2nm_node_ipv4_address_store’ from ‘o2nm_node_ip_tree_lookup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:298:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:301:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:300:17: branch_false: following ‘false’ branch (when ‘c == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:304:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/fs/ocfs2/cluster/nodemanager.c:304:17: call_function: inlined call to ‘rb_link_node’ from ‘o2nm_node_ipv4_address_store’
# 88| struct rb_node **rb_link)
# 89| {
# 90|-> node->__rb_parent_color = (unsigned long)parent;
# 91| node->rb_left = node->rb_right = NULL;
# 92|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/unaligned.h:18:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(const struct <anonymous> *)(®_val[0]).x’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/bluetooth/btrtl.c:1359:5: enter_function: entry to ‘btrtl_setup_realtek’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/drivers/bluetooth/btrtl.c:1364:21: call_function: calling ‘btrtl_initialize’ from ‘btrtl_setup_realtek’
# 16| static inline u16 get_unaligned_le16(const void *p)
# 17| {
# 18|-> return le16_to_cpu(__get_unaligned_t(__le16, p));
# 19| }
# 20|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/include/linux/unaligned.h:28:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/zstd/decompress/zstd_decompress.c:1201:8: enter_function: entry to ‘ZSTD_decompressContinue’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/zstd/decompress/zstd_decompress.c:1232:9: call_function: calling ‘ZSTD_decodeFrameHeader’ from ‘ZSTD_decompressContinue’
# 26| static inline u64 get_unaligned_le64(const void *p)
# 27| {
# 28|-> return le64_to_cpu(__get_unaligned_t(__le64, p));
# 29| }
# 30|
Error: GCC_ANALYZER_WARNING (CWE-469):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/kernel/bpf/hashtab.c:2308:19: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/kernel/bpf/hashtab.c:2303:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/kernel/bpf/hashtab.c:2308:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/kernel/bpf/hashtab.c:2308:19: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
# 2306| BUILD_BUG_ON(!__same_type(&__htab_map_lookup_elem,
# 2307| (void *(*)(struct bpf_map *map, void *key))NULL));
# 2308|-> *insn++ = BPF_EMIT_CALL(__htab_map_lookup_elem);
# 2309| *insn++ = BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 3);
# 2310| *insn++ = BPF_ALU64_IMM(BPF_ADD, BPF_REG_0,
Error: GCC_ANALYZER_WARNING (CWE-469):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/kernel/bpf/hashtab.c:2589:19: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
# 2587| BUILD_BUG_ON(!__same_type(&__htab_map_lookup_elem,
# 2588| (void *(*)(struct bpf_map *map, void *key))NULL));
# 2589|-> *insn++ = BPF_EMIT_CALL(__htab_map_lookup_elem);
# 2590| *insn++ = BPF_JMP_IMM(BPF_JEQ, ret, 0, 2);
# 2591| *insn++ = BPF_ALU64_IMM(BPF_ADD, ret,
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/sha3.c:274:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&*(struct __sha3_ctx *)shake_ctx.state.<Uebe0>.bytes[squeeze_offset]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/sha3.c:371:6: enter_function: entry to ‘shake256’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/crypto/sha3.c:377:9: call_function: calling ‘shake_squeeze’ from ‘shake256’
# 272| size_t copy = min(out_len, block_size - squeeze_offset);
# 273|
# 274|-> memcpy(out, &ctx->state.bytes[squeeze_offset], copy);
# 275| out += copy;
# 276| out_len -= copy;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:164:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:164:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:164:16: danger: use of uninitialized value ‘tmp’ here
# 162| unsigned long __find_nth_bit(const unsigned long *addr, unsigned long size, unsigned long n)
# 163| {
# 164|-> return FIND_NTH_BIT(addr[idx], size, n);
# 165| }
# 166| EXPORT_SYMBOL(__find_nth_bit);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:171:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:171:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:171:16: danger: use of uninitialized value ‘tmp’ here
# 169| unsigned long size, unsigned long n)
# 170| {
# 171|-> return FIND_NTH_BIT(addr1[idx] & addr2[idx], size, n);
# 172| }
# 173| EXPORT_SYMBOL(__find_nth_and_bit);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:178:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:178:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:178:16: danger: use of uninitialized value ‘tmp’ here
# 176| unsigned long size, unsigned long n)
# 177| {
# 178|-> return FIND_NTH_BIT(addr1[idx] & ~addr2[idx], size, n);
# 179| }
# 180| EXPORT_SYMBOL(__find_nth_andnot_bit);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:187:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:187:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/find_bit.c:187:16: danger: use of uninitialized value ‘tmp’ here
# 185| unsigned long size, unsigned long n)
# 186| {
# 187|-> return FIND_NTH_BIT(addr1[idx] & addr2[idx] & ~addr3[idx], size, n);
# 188| }
# 189| EXPORT_SYMBOL(__find_nth_and_andnot_bit);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:111:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:102:13: enter_function: entry to ‘test_ratelimit_stress’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:107:39: call_function: calling ‘kmalloc_array_noprof’ from ‘test_ratelimit_stress’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:107:39: return_function: returning to ‘test_ratelimit_stress’ from ‘kmalloc_array_noprof’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:109:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:109:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:110:21: branch_true: following ‘true’ branch (when ‘i < n_stress_kthread’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:111:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:111:30: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:111:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/lib/tests/test_ratelimit.c:111:17: danger: dereference of NULL ‘_res + (long unsigned int)i * 40’
# 109| KUNIT_EXPECT_NOT_NULL_MSG(test, sktp, "Memory allocation failure");
# 110| for (i = 0; i < n_stress_kthread; i++) {
# 111|-> sktp[i].tp = kthread_run(test_ratelimit_stress_child, &sktp[i], "%s/%i",
# 112| "test_ratelimit_stress_child", i);
# 113| KUNIT_EXPECT_NOT_NULL_MSG(test, sktp, "kthread creation failure");
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:352:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mlp’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:344:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:347:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:347:17: branch_false: following ‘false’ branch (when ‘mp == ranges’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:352:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/cma.c:352:17: danger: use of uninitialized value ‘mlp’ here
# 350| break;
# 351| }
# 352|-> __list_add(&mrp->list, mlp->list.prev, &mlp->list);
# 353| }
# 354| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2253:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘cached_esz’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2285:13: enter_function: entry to ‘kdamond_apply_schemes’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2294:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2295:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2298:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2303:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/core.c:2303:17: call_function: calling ‘damos_adjust_quota’ from ‘kdamond_apply_schemes’
# 2251| cached_esz = quota->esz;
# 2252| damos_set_effective_quota(quota);
# 2253|-> if (trace_damos_esz_enabled() && quota->esz != cached_esz)
# 2254| damos_trace_esz(c, s, quota);
# 2255| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:205:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:320:22: enter_function: entry to ‘damon_pa_apply_scheme’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:328:24: call_function: calling ‘damon_pa_pageout’ from ‘damon_pa_apply_scheme’
# 203| applied = reclaim_pages(&folio_list);
# 204| cond_resched();
# 205|-> s->last_applied = folio;
# 206| return damon_pa_core_addr(applied * PAGE_SIZE, addr_unit);
# 207| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:239:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:320:22: enter_function: entry to ‘damon_pa_apply_scheme’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:330:24: call_function: inlined call to ‘damon_pa_mark_accessed’ from ‘damon_pa_apply_scheme’
# 237| folio_put(folio);
# 238| }
# 239|-> s->last_applied = folio;
# 240| return damon_pa_core_addr(applied * PAGE_SIZE, addr_unit);
# 241| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:289:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘folio’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:320:22: enter_function: entry to ‘damon_pa_apply_scheme’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/damon/paddr.c:337:24: call_function: calling ‘damon_pa_migrate’ from ‘damon_pa_apply_scheme’
# 287| applied = damon_migrate_pages(&folio_list, s->target_nid);
# 288| cond_resched();
# 289|-> s->last_applied = folio;
# 290| return damon_pa_core_addr(applied * PAGE_SIZE, addr_unit);
# 291| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1804:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_vma’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1770:9: enter_function: entry to ‘move_pages’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1789:15: call_function: calling ‘uffd_move_lock’ from ‘move_pages’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1789:15: return_function: returning to ‘move_pages’ from ‘uffd_move_lock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1790:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1795:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1796:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1804:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1804:20: danger: use of uninitialized value ‘src_vma’ here
# 1802| */
# 1803| err = -EINVAL;
# 1804|-> if (src_vma->vm_flags & VM_SHARED)
# 1805| goto out_unlock;
# 1806| if (src_start + len > src_vma->vm_end)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1937:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_vma’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1770:9: enter_function: entry to ‘move_pages’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1789:15: call_function: calling ‘uffd_move_lock’ from ‘move_pages’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1789:15: return_function: returning to ‘move_pages’ from ‘uffd_move_lock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1790:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1795:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1796:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1797:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/mm/userfaultfd.c:1937:9: danger: use of uninitialized value ‘src_vma’ here
# 1935| out_unlock:
# 1936| up_read(&ctx->map_changing_lock);
# 1937|-> uffd_move_unlock(dst_vma, src_vma);
# 1938| out:
# 1939| VM_WARN_ON_ONCE(moved < 0);
Error: GCC_ANALYZER_WARNING (CWE-465):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:12: warning[-Wanalyzer-deref-before-check]: check of ‘state’ for NULL after already dereferencing it
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:887:14: enter_function: entry to ‘lec_priv_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:890:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: call_function: calling ‘lec_arp_walk’ from ‘lec_priv_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: return_function: returning to ‘lec_priv_walk’ from ‘lec_arp_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:12: danger: pointer ‘state’ is checked for NULL here but it was already dereferenced at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1)
# 892| spin_lock_irqsave(&priv->lec_arp_lock, state->flags);
# 893| }
# 894|-> if (!lec_arp_walk(state, l, priv) && !lec_misc_walk(state, l, priv)) {
# 895| spin_unlock_irqrestore(&priv->lec_arp_lock, state->flags);
# 896| state->locked = NULL;
Error: GCC_ANALYZER_WARNING (CWE-465):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:13: warning[-Wanalyzer-deref-before-check]: check of ‘state’ for NULL after already dereferencing it
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:887:14: enter_function: entry to ‘lec_priv_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:890:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: call_function: calling ‘lec_arp_walk’ from ‘lec_priv_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:14: return_function: returning to ‘lec_priv_walk’ from ‘lec_arp_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:47: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:47: call_function: calling ‘lec_misc_walk’ from ‘lec_priv_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:47: return_function: returning to ‘lec_priv_walk’ from ‘lec_misc_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/atm/lec.c:894:13: danger: pointer ‘state’ is checked for NULL here but it was already dereferenced at [(2)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/1)
# 892| spin_lock_irqsave(&priv->lec_arp_lock, state->flags);
# 893| }
# 894|-> if (!lec_arp_walk(state, l, priv) && !lec_misc_walk(state, l, priv)) {
# 895| spin_unlock_irqrestore(&priv->lec_arp_lock, state->flags);
# 896| state->locked = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:324:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘lport’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:292:6: enter_function: entry to ‘br_multicast_flood’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:305:12: branch_true: following ‘true’ branch (when ‘mdst’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:306:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:315:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:318:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:319:25: call_function: calling ‘br_multicast_rport_from_node_skb’ from ‘br_multicast_flood’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:319:25: return_function: returning to ‘br_multicast_flood’ from ‘br_multicast_rport_from_node_skb’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_forward.c:324:29: danger: dereference of NULL ‘lport’
# 322| port = lport;
# 323|
# 324|-> if (port->flags & BR_MULTICAST_TO_UNICAST) {
# 325| maybe_deliver_addr(lport, skb, p->eth_addr,
# 326| local_orig);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:114:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:101:12: enter_function: entry to ‘br_nf_pre_routing_finish_ipv6’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:103:44: call_function: inlined call to ‘nf_bridge_info_get’ from ‘br_nf_pre_routing_finish_ipv6’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:103:44: call_function: inlined call to ‘nf_bridge_info_get’ from ‘br_nf_pre_routing_finish_ipv6’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:108:20: call_function: calling ‘nf_bridge_get_physindev’ from ‘br_nf_pre_routing_finish_ipv6’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:108:20: return_function: returning to ‘br_nf_pre_routing_finish_ipv6’ from ‘nf_bridge_get_physindev’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:109:12: branch_false: following ‘false’ branch (when ‘br_indev’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:114:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netfilter_ipv6.c:114:9: danger: dereference of NULL ‘skb_ext_find(skb, 0)’
# 112| }
# 113|
# 114|-> nf_bridge->frag_max_size = IP6CB(skb)->frag_max_size;
# 115|
# 116| if (nf_bridge->pkt_otherhost) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:236:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1219:12: enter_function: entry to ‘br_port_fill_slave_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1223:40: call_function: calling ‘br_port_get_rtnl’ from ‘br_port_fill_slave_info’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1223:40: return_function: returning to ‘br_port_fill_slave_info’ from ‘br_port_get_rtnl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1223:16: call_function: calling ‘br_port_fill_attrs’ from ‘br_port_fill_slave_info’
# 234| const struct net_bridge_port *p)
# 235| {
# 236|-> u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
# 237| struct net_bridge_port *backup_p;
# 238| u64 timerval;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:950:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1200:12: enter_function: entry to ‘br_port_slave_changelink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1209:12: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1212:9: call_function: inlined call to ‘spin_lock_bh’ from ‘br_port_slave_changelink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1213:15: call_function: calling ‘br_port_get_rtnl’ from ‘br_port_slave_changelink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1213:15: return_function: returning to ‘br_port_slave_changelink’ from ‘br_port_get_rtnl’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/bridge/br_netlink.c:1213:15: call_function: calling ‘br_setport’ from ‘br_port_slave_changelink’
# 948| int err;
# 949|
# 950|-> old_flags = p->flags;
# 951| br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
# 952|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:68:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:43:13: enter_function: entry to ‘pptp_nat_expected’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:56:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:60:24: call_function: inlined call to ‘nfct_help_data’ from ‘pptp_nat_expected’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:63:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:64:17: call_function: inlined call to ‘arch_static_branch’ from ‘pptp_nat_expected’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:68:35: danger: dereference of NULL ‘help’
# 66| t.src.l3num = AF_INET;
# 67| t.src.u3.ip = master->tuplehash[!exp->dir].tuple.src.u3.ip;
# 68|-> t.src.u.gre.key = ct_pptp_info->pac_call_id;
# 69| t.dst.u3.ip = master->tuplehash[!exp->dir].tuple.dst.u3.ip;
# 70| t.dst.u.gre.key = ct_pptp_info->pns_call_id;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:141:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:120:1: enter_function: entry to ‘pptp_outbound_pkt’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:129:35: call_function: inlined call to ‘nfct_nat’ from ‘pptp_outbound_pkt’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:129:35: call_function: inlined call to ‘nfct_nat’ from ‘pptp_outbound_pkt’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:135:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:139:24: call_function: inlined call to ‘nfct_help_data’ from ‘pptp_outbound_pkt’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:141:22: danger: dereference of NULL ‘help’
# 139| ct_pptp_info = nfct_help_data(ct);
# 140|
# 141|-> new_callid = ct_pptp_info->pns_call_id;
# 142|
# 143| switch (msg = ntohs(ctlh->messageType)) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:214:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:199:1: enter_function: entry to ‘pptp_exp_gre’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:203:35: call_function: inlined call to ‘nfct_nat’ from ‘pptp_exp_gre’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:203:35: call_function: inlined call to ‘nfct_nat’ from ‘pptp_exp_gre’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:207:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:211:24: call_function: inlined call to ‘nfct_help_data’ from ‘pptp_exp_gre’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:211:24: call_function: inlined call to ‘nfct_help_data’ from ‘pptp_exp_gre’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv4/netfilter/nf_nat_pptp.c:214:38: danger: dereference of NULL ‘help’
# 212|
# 213| /* save original PAC call ID in nat_info */
# 214|-> nat_pptp_info->pac_call_id = ct_pptp_info->pac_call_id;
# 215|
# 216| /* alter expectation for PNS->PAC direction */
Error: GCC_ANALYZER_WARNING (CWE-465):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv6/ip6_output.c:1145:24: warning[-Wanalyzer-deref-before-check]: check of ‘dst’ for NULL after already dereferencing it
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv6/ip6_output.c:1266:19: enter_function: entry to ‘ip6_dst_lookup_flow’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/ipv6/ip6_output.c:1272:15: call_function: calling ‘ip6_dst_lookup_tail’ from ‘ip6_dst_lookup_flow’
# 1143|
# 1144| rcu_read_lock();
# 1145|-> from = rt ? rcu_dereference(rt->from) : NULL;
# 1146| err = ip6_route_get_saddr(net, from, &fl6->daddr,
# 1147| sk ? READ_ONCE(inet6_sk(sk)->srcprefs) : 0,
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/protocol.h:607:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/protocol.c:4104:13: enter_function: entry to ‘mptcp_graft_subflows’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/protocol.c:4119:17: call_function: inlined call to ‘list_splice_init’ from ‘mptcp_graft_subflows’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/protocol.c:4120:17: call_function: inlined call to ‘spin_unlock_bh’ from ‘mptcp_graft_subflows’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/protocol.c:4122:17: call_function: calling ‘__mptcp_flush_join_list’ from ‘mptcp_graft_subflows’
# 605| mptcp_subflow_tcp_sock(const struct mptcp_subflow_context *subflow)
# 606| {
# 607|-> return subflow->tcp_sock;
# 608| }
# 609|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:892:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<U3820>.<U d20>)[3]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:808:21: enter_function: entry to ‘subflow_syn_recv_sock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:840:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:854:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:854:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:860:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:864:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:873:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:882:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:884:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:885:57: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:886:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:889:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:892:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<U3820>.<U d20>)[3]’ here
# 890| owner = mptcp_sk(ctx->conn);
# 891|
# 892|-> if (mp_opt.deny_join_id0)
# 893| WRITE_ONCE(owner->pm.remote_deny_join_id0, true);
# 894|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:892:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5820>.<U2d20>)[3]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:808:21: enter_function: entry to ‘subflow_syn_recv_sock’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:840:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:854:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:854:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:860:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:864:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:873:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:882:39: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:884:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:885:57: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:886:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:889:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/mptcp/subflow.c:892:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5820>.<U2d20>)[3]’ here
# 890| owner = mptcp_sk(ctx->conn);
# 891|
# 892|-> if (mp_opt.deny_join_id0)
# 893| WRITE_ONCE(owner->pm.remote_deny_join_id0, true);
# 894|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:397:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:385:13: enter_function: entry to ‘nf_ct_expect_insert’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:394:9: call_function: inlined call to ‘refcount_add’ from ‘nf_ct_expect_insert’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:394:9: call_function: inlined call to ‘refcount_add’ from ‘nf_ct_expect_insert’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:397:18: danger: dereference of NULL ‘nf_ct_ext_find(*exp.master, 0)’
# 395|
# 396| timer_setup(&exp->timeout, nf_ct_expectation_timed_out, 0);
# 397|-> helper = rcu_dereference_protected(master_help->helper,
# 398| lockdep_is_held(&nf_conntrack_expect_lock));
# 399| if (helper) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_expect.c:657:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 655| seq_printf(s, "%sUSERSPACE", delim);
# 656|
# 657|-> helper = rcu_dereference(nfct_help(expect->master)->helper);
# 658| if (helper) {
# 659| seq_printf(s, "%s%s", expect->flags ? " " : "", helper->name);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_helper.c:338:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 336|
# 337| /* rcu_read_lock()ed by nf_hook_thresh */
# 338|-> helper = rcu_dereference(help->helper);
# 339|
# 340| nf_log_packet(nf_ct_net(ct), nf_ct_l3num(ct), 0, skb, NULL, NULL, NULL,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_helper.c:405:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_helper.c:402:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_helper.c:405:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_helper.c:405:16: danger: dereference of NULL ‘nf_ct_ext_find(*exp.master, 0)’
# 403| return true;
# 404|
# 405|-> this = rcu_dereference_protected(help->helper,
# 406| lockdep_is_held(&nf_conntrack_expect_lock));
# 407| return this == me;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_netlink.c:3401:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 3399| m_help = nfct_help(exp->master);
# 3400|
# 3401|-> helper = rcu_dereference(m_help->helper);
# 3402| if (!helper)
# 3403| return false;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:172:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:161:13: enter_function: entry to ‘pptp_destroy_siblings’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:170:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘pptp_destroy_siblings’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:170:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:172:27: danger: dereference of NULL ‘help’
# 170| memcpy(&t, &ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple, sizeof(t));
# 171| t.dst.protonum = IPPROTO_GRE;
# 172|-> t.src.u.gre.key = ct_pptp_info->pns_call_id;
# 173| t.dst.u.gre.key = ct_pptp_info->pac_call_id;
# 174| if (!destroy_sibling_or_exp(net, ct, &t))
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:270:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 268| case PPTP_START_SESSION_REPLY:
# 269| /* server confirms new control session */
# 270|-> if (info->sstate < PPTP_SESSION_REQUESTED)
# 271| goto invalid;
# 272| if (pptpReq->srep.resultCode == PPTP_START_OK)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:280:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 278| case PPTP_STOP_SESSION_REPLY:
# 279| /* server confirms end of control session */
# 280|-> if (info->sstate > PPTP_SESSION_STOPREQ)
# 281| goto invalid;
# 282| if (pptpReq->strep.resultCode == PPTP_STOP_OK)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:290:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 288| case PPTP_OUT_CALL_REPLY:
# 289| /* server accepted call, we now expect GRE frames */
# 290|-> if (info->sstate != PPTP_SESSION_CONFIRMED)
# 291| goto invalid;
# 292| if (info->cstate != PPTP_CALL_OUT_REQ &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:313:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 311| case PPTP_IN_CALL_REQUEST:
# 312| /* server tells us about incoming call request */
# 313|-> if (info->sstate != PPTP_SESSION_CONFIRMED)
# 314| goto invalid;
# 315|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:324:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 322| case PPTP_IN_CALL_CONNECT:
# 323| /* server tells us about incoming call established */
# 324|-> if (info->sstate != PPTP_SESSION_CONFIRMED)
# 325| goto invalid;
# 326| if (info->cstate != PPTP_CALL_IN_REP &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:347:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 345| cid = pptpReq->disc.callID;
# 346| pr_debug("%s, CID=%X\n", pptp_msg_name(msg), ntohs(cid));
# 347|-> info->cstate = PPTP_CALL_NONE;
# 348|
# 349| /* untrack this call id, unexpect GRE packets */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:370:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 368|
# 369| invalid:
# 370|-> pr_debug("invalid %s: type=%d cid=%u pcid=%u "
# 371| "cstate=%d sstate=%d pns_cid=%u pac_cid=%u\n",
# 372| pptp_msg_name(msg),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:397:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 395| case PPTP_START_SESSION_REQUEST:
# 396| /* client requests for new control session */
# 397|-> if (info->sstate != PPTP_SESSION_NONE)
# 398| goto invalid;
# 399| info->sstate = PPTP_SESSION_REQUESTED;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:404:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 402| case PPTP_STOP_SESSION_REQUEST:
# 403| /* client requests end of control session */
# 404|-> info->sstate = PPTP_SESSION_STOPREQ;
# 405| break;
# 406|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:409:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 407| case PPTP_OUT_CALL_REQUEST:
# 408| /* client initiating connection to server */
# 409|-> if (info->sstate != PPTP_SESSION_CONFIRMED)
# 410| goto invalid;
# 411| info->cstate = PPTP_CALL_OUT_REQ;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:420:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 418| case PPTP_IN_CALL_REPLY:
# 419| /* client answers incoming call */
# 420|-> if (info->cstate != PPTP_CALL_IN_REQ &&
# 421| info->cstate != PPTP_CALL_IN_REP)
# 422| goto invalid;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:441:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 439| case PPTP_CALL_CLEAR_REQUEST:
# 440| /* client requests hangup of call */
# 441|-> if (info->sstate != PPTP_SESSION_CONFIRMED)
# 442| goto invalid;
# 443| /* FUTURE: iterate over all calls and check if
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:465:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 463|
# 464| invalid:
# 465|-> pr_debug("invalid %s: type=%d cid=%u pcid=%u "
# 466| "cstate=%d sstate=%d pns_cid=%u pac_cid=%u\n",
# 467| pptp_msg_name(msg),
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:561:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:518:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:522:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:523:12: branch_false: following ‘false’ branch (when ‘tcph’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:526:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:530:12: branch_false: following ‘false’ branch (when ‘pptph’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:534:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:538:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:539:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:538:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:544:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:545:12: branch_false: following ‘false’ branch (when ‘ctlh’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:547:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:558:12: branch_false: following ‘false’ branch (when ‘pptpReq’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:561:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_pptp.c:561:21: danger: dereference of NULL ‘help’
# 559| return NF_ACCEPT;
# 560|
# 561|-> oldsstate = info->sstate;
# 562| oldcstate = info->cstate;
# 563|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:105:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:78:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:83:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:84:12: branch_false: following ‘false’ branch (when ‘th’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:88:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:89:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:92:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:93:12: branch_true: following ‘true’ branch (when ‘ctinfo != 3’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:96:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:96:20: branch_false: following ‘false’ branch (when ‘datalen == 8’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:99:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:100:20: branch_false: following ‘false’ branch (when ‘req’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:103:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:103:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:105:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:105:25: danger: dereference of NULL ‘help’
# 103| if (req->RPC_code != htonl(SANE_NET_START)) {
# 104| /* Not an interesting command */
# 105|-> WRITE_ONCE(ct_sane_info->state, SANE_STATE_NORMAL);
# 106| return NF_ACCEPT;
# 107| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:110:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:78:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:83:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:84:12: branch_false: following ‘false’ branch (when ‘th’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:88:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:89:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:92:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:93:12: branch_true: following ‘true’ branch (when ‘ctinfo != 3’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:96:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:96:20: branch_false: following ‘false’ branch (when ‘datalen == 8’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:99:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:100:20: branch_false: following ‘false’ branch (when ‘req’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:103:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:103:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:110:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:110:17: danger: dereference of NULL ‘help’
# 108|
# 109| /* We're interested in the next reply */
# 110|-> WRITE_ONCE(ct_sane_info->state, SANE_STATE_START_REQUESTED);
# 111| return NF_ACCEPT;
# 112| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:117:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:78:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:83:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:84:12: branch_false: following ‘false’ branch (when ‘th’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:88:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:89:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:92:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:93:12: branch_false: following ‘false’ branch (when ‘ctinfo == 3’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:117:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_conntrack_sane.c:117:13: danger: dereference of NULL ‘help’
# 115|
# 116| /* Is it a reply to an uninteresting command? */
# 117|-> if (READ_ONCE(ct_sane_info->state) != SANE_STATE_START_REQUESTED)
# 118| return NF_ACCEPT;
# 119|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:114:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:145:21: enter_function: entry to ‘nf_nat_sip’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:160:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:161:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:161:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:164:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:164:22: call_function: calling ‘map_addr’ from ‘nf_nat_sip’
# 112| ct->tuplehash[dir].tuple.dst.u.udp.port == port) {
# 113| newaddr = ct->tuplehash[!dir].tuple.src.u3;
# 114|-> newport = ct_sip_info->forced_dport ? :
# 115| ct->tuplehash[!dir].tuple.src.u.udp.port;
# 116| } else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:282:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:275:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:276:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:275:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:282:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:282:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:282:39: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:282:39: danger: dereference of NULL ‘help’
# 280|
# 281| /* Mangle destination port for Cisco phones, then fix up checksums */
# 282|-> if (dir == IP_CT_DIR_REPLY && ct_sip_info->forced_dport) {
# 283| struct udphdr *uh;
# 284|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nf_nat_sip.c:400:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘help’
# 398| * original direction, try to use the destination port in the opposite
# 399| * direction. */
# 400|-> srcport = ct_sip_info->forced_dport ? :
# 401| ct->tuplehash[dir].tuple.src.u.udp.port;
# 402| if (exp->tuple.dst.u.udp.port == srcport)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_cthelper.c:104:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_cthelper.c:101:12: branch_false: following ‘false’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_cthelper.c:104:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_cthelper.c:104:18: danger: dereference of NULL ‘nf_ct_ext_find(ct, 0)’
# 102| return -EINVAL;
# 103|
# 104|-> helper = rcu_dereference(help->helper);
# 105| if (!helper || helper->data_len == 0)
# 106| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_cthelper.c:118:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 116| const struct nf_conntrack_helper *helper;
# 117|
# 118|-> helper = rcu_dereference(help->helper);
# 119| if (helper && helper->data_len &&
# 120| nla_put(skb, CTA_HELP_INFO, helper->data_len, &help->data))
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:447:47: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1400:12: enter_function: entry to ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1414:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: call_function: calling ‘verdicthdr_get’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: return_function: returning to ‘nfqnl_recv_verdict_batch’ from ‘verdicthdr_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1418:12: branch_false: following ‘false’ branch (when ‘vhdr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1421:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1427:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1433:9: call_function: inlined call to ‘spin_unlock_bh’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1435:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1439:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1445:17: call_function: calling ‘nfqnl_reinject’ from ‘nfqnl_recv_verdict_batch’
# 445| {
# 446| #if IS_ENABLED(CONFIG_NF_CONNTRACK)
# 447|-> struct nf_conn *ct = (void *)skb_nfct(entry->skb);
# 448|
# 449| if (!ct || nf_ct_is_confirmed(ct))
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:481:38: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1400:12: enter_function: entry to ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1414:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: call_function: calling ‘verdicthdr_get’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: return_function: returning to ‘nfqnl_recv_verdict_batch’ from ‘verdicthdr_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1418:12: branch_false: following ‘false’ branch (when ‘vhdr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1421:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1427:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1433:9: call_function: inlined call to ‘spin_unlock_bh’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1435:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1439:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1445:17: call_function: calling ‘nfqnl_reinject’ from ‘nfqnl_recv_verdict_batch’
# 479| ct_hook = rcu_dereference(nf_ct_hook);
# 480| if (ct_hook)
# 481|-> ct_verdict = ct_hook->update(entry->state.net, entry->skb);
# 482| rcu_read_unlock();
# 483|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:497:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1400:12: enter_function: entry to ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1414:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: call_function: calling ‘verdicthdr_get’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1417:16: return_function: returning to ‘nfqnl_recv_verdict_batch’ from ‘verdicthdr_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1418:12: branch_false: following ‘false’ branch (when ‘vhdr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1421:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1427:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1433:9: call_function: inlined call to ‘spin_unlock_bh’ from ‘nfqnl_recv_verdict_batch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1435:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1438:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1439:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nfnetlink_queue.c:1445:17: call_function: calling ‘nfqnl_reinject’ from ‘nfqnl_recv_verdict_batch’
# 495| }
# 496|
# 497|-> if (verdict != NF_DROP && entry->nf_ct_is_unconfirmed) {
# 498| /* If first queued segment was already reinjected then
# 499| * there is a good chance the ct entry is now confirmed.
Error: GCC_ANALYZER_WARNING (CWE-131):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_inner.c:100:23: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_inner.c:216:12: enter_function: entry to ‘nft_inner_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_inner.c:226:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_inner.c:227:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_inner.c:227:21: call_function: calling ‘nft_inner_parse_l2l3’ from ‘nft_inner_parse’
# 98| u32 _version;
# 99|
# 100|-> iph = skb_header_pointer(pkt->skb, off, sizeof(_version), &_version);
# 101| if (!iph)
# 102| return -1;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1656:44: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<Ubc80>.n’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1833:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1654| for (b = 0; b < NFT_PIPAPO_BUCKETS(f->bb); b++) {
# 1655| bitmap_cut(pos, pos, rulemap[i].to,
# 1656|-> rulemap[i].n,
# 1657| f->bsize * BITS_PER_LONG);
# 1658|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1663:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<Ubc80>.n’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1833:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1661| }
# 1662|
# 1663|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n,
# 1664| last ? 0 : rulemap[i + 1].n, last);
# 1665| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1663:62: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<Ubc80>.n’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1833:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:13: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1842:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1661| }
# 1662|
# 1663|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n,
# 1664| last ? 0 : rulemap[i + 1].n, last);
# 1665| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_fq_codel.c:197:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ret’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_fq_codel.c:196:12: branch_true: following ‘true’ branch (when ‘idx == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_fq_codel.c:197:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_fq_codel.c:197:21: danger: use of uninitialized value ‘ret’ here
# 195| idx = fq_codel_classify(skb, sch, &ret);
# 196| if (idx == 0) {
# 197|-> if (ret & __NET_XMIT_BYPASS)
# 198| qdisc_qstats_drop(sch);
# 199| __qdisc_drop(skb, to_free);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:708:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dev_queue’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:661:12: enter_function: entry to ‘mqprio_dump_class_stats’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:666:12: branch_false: following ‘false’ branch (when ‘cl <= 65503’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:706:50: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:706:50: call_function: calling ‘mqprio_queue_get’ from ‘mqprio_dump_class_stats’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:706:50: return_function: return of NULL to ‘mqprio_dump_class_stats’ from ‘mqprio_queue_get’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/sched/sch_mqprio.c:708:23: danger: dereference of NULL ‘dev_queue’
# 706| struct netdev_queue *dev_queue = mqprio_queue_get(sch, cl);
# 707|
# 708|-> sch = rtnl_dereference(dev_queue->qdisc_sleeping);
# 709| if (gnet_stats_copy_basic(d, sch->cpu_bstats,
# 710| &sch->bstats, true) < 0 ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2301:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘skb’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2272:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2275:30: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2275:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2276:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/net/tls/tls_sw.c:2301:13: danger: dereference of NULL ‘skb’
# 2299|
# 2300| /* splice does not support reading control messages */
# 2301|-> if (tlm->control != TLS_RECORD_TYPE_DATA) {
# 2302| err = -EINVAL;
# 2303| goto splice_requeue;
Error: CLANG_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/samples/bpf/vmlinux.h:101218:2: warning: declaration does not declare anything [-Wmissing-declarations]
# 101218 | struct freelist_tid;
# | ^~~~~~~~~~~~~~~~~~~
#101216|
#101217| struct kmem_cache_cpu {
#101218|-> struct freelist_tid;
#101219| struct slab *slab;
#101220| struct slab *partial;
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/samples/bpf/vmlinux.h:101218:28: warning[warning]: declaration does not declare anything
#101216|
#101217| struct kmem_cache_cpu {
#101218|-> struct freelist_tid;
#101219| struct slab *slab;
#101220| struct slab *partial;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1096:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘nval’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1025:12: enter_function: entry to ‘cs35l56_hda_read_acpi’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1038:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1050:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1053:15: call_function: calling ‘cs35l56_hda_apply_platform_fixups’ from ‘cs35l56_hda_read_acpi’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1053:15: return_function: returning to ‘cs35l56_hda_read_acpi’ from ‘cs35l56_hda_apply_platform_fixups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1057:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1091:13: call_function: inlined call to ‘IS_ERR’ from ‘cs35l56_hda_read_acpi’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1091:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1096:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/codecs/side-codecs/cs35l56_hda.c:1096:23: danger: use of uninitialized value ‘nval’ here
# 1094| PTR_ERR(sub));
# 1095| } else {
# 1096|-> ret = cirrus_scodec_get_speaker_id(cs35l56->base.dev, cs35l56->index, nval, -1);
# 1097| if (ret == -ENOENT) {
# 1098| cs35l56->system_name = sub;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:970:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pci_vendor’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1006:6: enter_function: entry to ‘snd_hda_pick_fixup’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1019:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1023:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1023:13: branch_false: following ‘false’ branch (when the strings are non-equal)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1032:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1045:12: branch_false: following ‘false’ branch (when ‘quirk’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1048:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1048:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1053:24: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1067:25: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1069:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/hda/common/auto_parser.c:1069:20: branch_false: following ‘false’ branch...
# 968| static bool hda_quirk_match(u16 vendor, u16 device, const struct hda_quirk *q)
# 969| {
# 970|-> if (q->subvendor != vendor)
# 971| return false;
# 972| return !q->subdevice ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1298:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘mixer_scb’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1254:21: branch_true: following ‘true’ branch (when ‘i != 32’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1255:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1254:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1259:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1259:20: branch_false: following ‘false’ branch (when ‘i != 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1261:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1269:27: branch_true: following ‘true’ branch (when ‘pcm_index == -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1255:60: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1254:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1259:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1259:20: branch_true: following ‘true’ branch (when ‘i == 1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1259:20: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1274:12: branch_false: following ‘false’ branch (when ‘pcm_index != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1279:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1279:12: branch_true: following ‘true’ branch (when ‘src_scb’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1280:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1280:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1280:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1287:29: branch_true: following ‘true’ branch (when ‘i != 14’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1288:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1294:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1298:21: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/pci/cs46xx/dsp_spos_scb_lib.c:1298:21: danger: dereference of NULL ‘mixer_scb’
# 1296|
# 1297| /* we need to create a new SRC SCB */
# 1298|-> if (mixer_scb->sub_list_ptr == ins->the_null_scb) {
# 1299| src_parent_scb = mixer_scb;
# 1300| insert_point = SCB_ON_PARENT_SUBLIST_SCB;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1145:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘regvalue[i]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1089:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1090:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1122:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1123:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1140:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1143:51: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1145:21: danger: use of uninitialized value ‘regvalue[i]’ here
# 1143| gain_val[i] = 0x1e00 - ((p->max - gain_val[i]) * interval_offset);
# 1144| gain_val[i] &= 0xffff;
# 1145|-> if (regvalue[i] != gain_val[i])
# 1146| changed = 1;
# 1147| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1227:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘regvalue’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1189:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1190:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1210:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1211:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/rt1320-sdw.c:1227:34: danger: use of uninitialized value ‘regvalue’ here
# 1225| }
# 1226|
# 1227|-> ctl = p->max - (((0x1e00 - regvalue) & 0xffff) / interval_offset);
# 1228| ucontrol->value.integer.value[i] = ctl;
# 1229| }
Error: GCC_ANALYZER_WARNING (CWE-787):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1126:17: warning[-Wanalyzer-out-of-bounds]: buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1097:12: enter_function: entry to ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1124:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1125:9: call_function: inlined call to ‘find_next_bit’ from ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1126:17: danger: write of 4 bytes at offset ‘104’ exceeds ‘*(void *)<unknown>’
# 1124| addr = prop->source_ports;
# 1125| for_each_set_bit(bit, &addr, 32) {
# 1126|-> dpn[i].num = bit;
# 1127| dpn[i].type = SDW_DPN_FULL;
# 1128| dpn[i].simple_ch_prep_sm = false;
Error: GCC_ANALYZER_WARNING (CWE-787):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1127:17: warning[-Wanalyzer-out-of-bounds]: buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1097:12: enter_function: entry to ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1124:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1125:9: call_function: inlined call to ‘find_next_bit’ from ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1127:17: danger: write of 4 bytes at offset ‘128’ exceeds ‘*(void *)<unknown>’
# 1125| for_each_set_bit(bit, &addr, 32) {
# 1126| dpn[i].num = bit;
# 1127|-> dpn[i].type = SDW_DPN_FULL;
# 1128| dpn[i].simple_ch_prep_sm = false;
# 1129| dpn[i].ch_prep_timeout = 10;
Error: GCC_ANALYZER_WARNING (CWE-787):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1128:17: warning[-Wanalyzer-out-of-bounds]: buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1097:12: enter_function: entry to ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1124:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1125:9: call_function: inlined call to ‘find_next_bit’ from ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1128:17: danger: write of 1 byte at offset ‘202’ exceeds ‘*(void *)<unknown>’
# 1126| dpn[i].num = bit;
# 1127| dpn[i].type = SDW_DPN_FULL;
# 1128|-> dpn[i].simple_ch_prep_sm = false;
# 1129| dpn[i].ch_prep_timeout = 10;
# 1130| i++;
Error: GCC_ANALYZER_WARNING (CWE-787):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1129:17: warning[-Wanalyzer-out-of-bounds]: buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1097:12: enter_function: entry to ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1119:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1124:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1125:9: call_function: inlined call to ‘find_next_bit’ from ‘tas_read_prop’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/codecs/tas2783-sdw.c:1129:17: danger: write of 4 bytes at offset ‘136’ exceeds ‘*(void *)<unknown>’
# 1127| dpn[i].type = SDW_DPN_FULL;
# 1128| dpn[i].simple_ch_prep_sm = false;
# 1129|-> dpn[i].ch_prep_timeout = 10;
# 1130| i++;
# 1131| }
Error: COMPILER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/path.c:137:38: warning[-Wstringop-overread]: ‘strcmp’ reading 1 or more bytes from a region of size 0
# 137 | return id->id == id2->id && !strcmp(id->tplg_name, id2->tplg_name);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# ‘avs_condpaths_walk’: events 1-3
# 137 | return id->id == id2->id && !strcmp(id->tplg_name, id2->tplg_name);
# | ~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# | | |
# | | (3) warning happens here
# | (1) when the condition is evaluated to true
#......
# 155 | if (id->id != path->template->owner->id ||
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# | |
# | (2) when the condition is evaluated to false
# 156 | strcmp(id->tplg_name, path->template->owner->owner->name))
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/path.h:14: included_from: Included from here.
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/path.c:15: included_from: Included from here.
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/topology.h: scope_hint: In function ‘avs_condpaths_walk’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/topology.h:152:13: note: at offset 4 into source object ‘id’ of size 4
# 152 | u32 id;
# | ^~
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/topology.h:152:13: note: at offset 4 into source object ‘id’ of size 4
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/topology.h:152:13: note: at offset 4 into source object ‘id’ of size 4
# 135| struct avs_tplg_path_template_id *id2)
# 136| {
# 137|-> return id->id == id2->id && !strcmp(id->tplg_name, id2->tplg_name);
# 138| }
# 139|
Error: COMPILER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/intel/avs/path.c:137:38: warning[-Wstringop-overread]: ‘strcmp’ reading 1 or more bytes from a region of size 0
# 135| struct avs_tplg_path_template_id *id2)
# 136| {
# 137|-> return id->id == id2->id && !strcmp(id->tplg_name, id2->tplg_name);
# 138| }
# 139|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:329:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘desc’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:295:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:298:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:300:12: branch_false: following ‘false’ branch (when ‘cmp_drv’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:303:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:305:12: branch_false: following ‘false’ branch (when ‘config’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:308:22: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:310:12: branch_false: following ‘false’ branch (when ‘mbq_config’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:313:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:316:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:322:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:322:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:327:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/soc/sdca/sdca_class_function.c:329:15: danger: use of uninitialized value ‘desc’ here
# 327| drv->function = &core->functions[i];
# 328|
# 329|-> ret = sdca_parse_function(dev, core->sdw, desc, drv->function);
# 330| if (ret)
# 331| return ret;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:61:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘queued’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:40:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:44:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:44:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:48:32: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:60:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:61:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/sound/usb/pcm.c:61:17: danger: use of uninitialized value ‘queued’ here
# 59|
# 60| if (subs->direction == SNDRV_PCM_STREAM_PLAYBACK) {
# 61|-> est_delay = queued - est_delay;
# 62| if (est_delay < 0)
# 63| est_delay = 0;
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:553:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:881:12: enter_function: entry to ‘do_dump’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:894:14: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:898:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:899:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:930:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:930:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:950:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:950:19: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:959:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:959:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:960:28: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:962:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:963:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:962:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:964:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:962:21: branch_true: following ‘true’ branch (when the strings are non-equal)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:965:32: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:967:23: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:967:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:968:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:974:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:974:17: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1084:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:984:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:985:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:985:25: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:986:28: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:986:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:991:29: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:991:28: branch_true: following ‘true’ branch (when the strings are equal)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1001:25: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:983:16: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1042:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1042:12: branch_false: following ‘false’ branch (when ‘btf’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1060:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1060:21: branch_false: following ‘false’ branch (when ‘root_type_cnt <= i’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1068:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1068:12: branch_true: following ‘true’ branch (when ‘dump_c != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1069:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1069:20: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1074:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/bpftool/btf.c:1074:23: call_function: calling ‘dump_btf_c’ from ‘do_dump’
# 551|
# 552| /* Sort kfuncs by name for improved vmlinux.h stability */
# 553|-> qsort_r(kfuncs.elems, kfuncs.cnt, sizeof(*kfuncs.elems), cmp_kfuncs, (void *)btf);
# 554| for (i = 0; i < kfuncs.cnt; i++) {
# 555| const struct btf_type *t = kfuncs.elems[i];
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:241:14: warning[-Wanalyzer-malloc-leak]: leak of ‘get_id(name + size)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:776:5: enter_function: entry to ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:805:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:808:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:810:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:817:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:817:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:818:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:817:13: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:824:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/bpf/resolve_btfids/main.c:824:13: call_function: calling ‘symbols_collect’ from ‘main’
# 239| return NULL;
# 240|
# 241|-> id = strdup(prefix_end + pos);
# 242| if (id) {
# 243| /*
Error: GCC_ANALYZER_WARNING (CWE-416):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/include/linux/list.h:107:9: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘atom’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3415:13: enter_function: entry to ‘__merge_work_atoms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3422:16: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3428:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3440:25: call_function: inlined call to ‘list_splice_init’ from ‘__merge_work_atoms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3441:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3446:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3446:25: call_function: calling ‘free_work_atoms’ from ‘__merge_work_atoms’
# 105| static inline void list_del(struct list_head *entry)
# 106| {
# 107|-> __list_del(entry->prev, entry->next);
# 108| entry->next = LIST_POISON1;
# 109| entry->prev = LIST_POISON2;
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:1718:1: warning[-Wanalyzer-malloc-leak]: leak of ‘hdr’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5620:12: enter_function: entry to ‘btf_add_distilled_types’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5631:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5635:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5646:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5648:31: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/lib/bpf/btf.c:5648:31: call_function: calling ‘btf_add_type’ from ‘btf_add_distilled_types’
# 1716| btf->raw_data_swapped = NULL;
# 1717| }
# 1718|-> }
# 1719|
# 1720| /* Ensure BTF is ready to be modified (by splitting into a three memory
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6633:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6614:5: enter_function: entry to ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: return_function: returning to ‘devlink_rate_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6624:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6626:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6627:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6627:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6630:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6632:41: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6633:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(21)](sarif:/runs/0/results/95/codeFlows/0/threadFlows/0/locations/20)
# 6631| dst->_len.bus_name = len;
# 6632| dst->bus_name = malloc(len + 1);
# 6633|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 6634| dst->bus_name[len] = 0;
# 6635| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6633:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6614:5: enter_function: entry to ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: return_function: returning to ‘devlink_rate_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6623:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6624:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6626:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6627:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6627:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6630:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_rate_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6632:41: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6633:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(21)](sarif:/runs/0/results/96/codeFlows/0/threadFlows/0/locations/20) could be NULL where non-null expected
# 6631| dst->_len.bus_name = len;
# 6632| dst->bus_name = malloc(len + 1);
# 6633|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 6634| dst->bus_name[len] = 0;
# 6635| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6935:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6916:5: enter_function: entry to ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: return_function: returning to ‘devlink_linecard_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6926:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6928:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6929:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6929:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6932:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6934:41: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6935:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(21)](sarif:/runs/0/results/101/codeFlows/0/threadFlows/0/locations/20)
# 6933| dst->_len.bus_name = len;
# 6934| dst->bus_name = malloc(len + 1);
# 6935|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 6936| dst->bus_name[len] = 0;
# 6937| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6935:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6916:5: enter_function: entry to ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: return_function: returning to ‘devlink_linecard_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6926:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6928:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6929:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6929:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6932:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6934:41: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6935:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(21)](sarif:/runs/0/results/102/codeFlows/0/threadFlows/0/locations/20) could be NULL where non-null expected
# 6933| dst->_len.bus_name = len;
# 6934| dst->bus_name = malloc(len + 1);
# 6935|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 6936| dst->bus_name[len] = 0;
# 6937| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6944:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6916:5: enter_function: entry to ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: return_function: returning to ‘devlink_linecard_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6926:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6937:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6938:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6938:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6941:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6943:41: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6944:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(21)](sarif:/runs/0/results/103/codeFlows/0/threadFlows/0/locations/20)
# 6942| dst->_len.dev_name = len;
# 6943| dst->dev_name = malloc(len + 1);
# 6944|-> memcpy(dst->dev_name, ynl_attr_get_str(attr), len);
# 6945| dst->dev_name[len] = 0;
# 6946| } else if (type == DEVLINK_ATTR_LINECARD_INDEX) {
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6944:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6916:5: enter_function: entry to ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: return_function: returning to ‘devlink_linecard_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6925:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6926:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6937:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6938:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6938:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6941:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_linecard_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6943:41: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:6944:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(21)](sarif:/runs/0/results/104/codeFlows/0/threadFlows/0/locations/20) could be NULL where non-null expected
# 6942| dst->_len.dev_name = len;
# 6943| dst->dev_name = malloc(len + 1);
# 6944|-> memcpy(dst->dev_name, ynl_attr_get_str(attr), len);
# 6945| dst->dev_name[len] = 0;
# 6946| } else if (type == DEVLINK_ATTR_LINECARD_INDEX) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7123:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7104:5: enter_function: entry to ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: return_function: returning to ‘devlink_selftests_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7114:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7116:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7117:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7117:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7120:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7122:41: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7123:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(21)](sarif:/runs/0/results/105/codeFlows/0/threadFlows/0/locations/20)
# 7121| dst->_len.bus_name = len;
# 7122| dst->bus_name = malloc(len + 1);
# 7123|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 7124| dst->bus_name[len] = 0;
# 7125| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7123:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7104:5: enter_function: entry to ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: return_function: returning to ‘devlink_selftests_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7114:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7116:20: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7117:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7117:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7120:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7122:41: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7123:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(21)](sarif:/runs/0/results/106/codeFlows/0/threadFlows/0/locations/20) could be NULL where non-null expected
# 7121| dst->_len.bus_name = len;
# 7122| dst->bus_name = malloc(len + 1);
# 7123|-> memcpy(dst->bus_name, ynl_attr_get_str(attr), len);
# 7124| dst->bus_name[len] = 0;
# 7125| } else if (type == DEVLINK_ATTR_DEV_NAME) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7132:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7104:5: enter_function: entry to ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: return_function: returning to ‘devlink_selftests_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7114:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7125:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7126:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7126:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7129:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7131:41: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7132:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(21)](sarif:/runs/0/results/107/codeFlows/0/threadFlows/0/locations/20)
# 7130| dst->_len.dev_name = len;
# 7131| dst->dev_name = malloc(len + 1);
# 7132|-> memcpy(dst->dev_name, ynl_attr_get_str(attr), len);
# 7133| dst->dev_name[len] = 0;
# 7134| }
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7132:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7104:5: enter_function: entry to ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: call_function: calling ‘ynl_attr_first’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: return_function: returning to ‘devlink_selftests_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7113:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7114:37: call_function: inlined call to ‘ynl_attr_type’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7125:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7126:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7126:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7129:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘devlink_selftests_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7131:41: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/devlink-user.c:7132:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(21)](sarif:/runs/0/results/108/codeFlows/0/threadFlows/0/locations/20) could be NULL where non-null expected
# 7130| dst->_len.dev_name = len;
# 7131| dst->dev_name = malloc(len + 1);
# 7132|-> memcpy(dst->dev_name, ynl_attr_get_str(attr), len);
# 7133| dst->dev_name[len] = 0;
# 7134| }
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:206:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(unsigned int)((int)*attr.nla_len + -4))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:656:5: enter_function: entry to ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:668:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:671:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:671:9: branch_false: following ‘false’ branch (when ‘attr’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:679:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:679:12: branch_true: following ‘true’ branch (when ‘n_addr != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:680:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: call_function: calling ‘ynl_attr_first’ from ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: return_function: returning to ‘nfsd_listener_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:685:29: call_function: inlined call to ‘ynl_attr_type’ from ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:685:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:686:46: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:687:37: call_function: calling ‘nfsd_sock_parse’ from ‘nfsd_listener_get_rsp_parse’
# 204| dst->_len.addr = len;
# 205| dst->addr = malloc(len);
# 206|-> memcpy(dst->addr, ynl_attr_data(attr), len);
# 207| } else if (type == NFSD_A_SOCK_TRANSPORT_NAME) {
# 208| if (ynl_attr_validate(yarg, attr))
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:214:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:656:5: enter_function: entry to ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:668:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:671:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:671:9: branch_false: following ‘false’ branch (when ‘attr’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:679:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:679:12: branch_true: following ‘true’ branch (when ‘n_addr != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:680:29: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: call_function: calling ‘ynl_attr_first’ from ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: return_function: returning to ‘nfsd_listener_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:684:17: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:685:29: call_function: inlined call to ‘ynl_attr_type’ from ‘nfsd_listener_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:685:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:686:46: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:687:37: call_function: calling ‘nfsd_sock_parse’ from ‘nfsd_listener_get_rsp_parse’
# 212| dst->_len.transport_name = len;
# 213| dst->transport_name = malloc(len + 1);
# 214|-> memcpy(dst->transport_name, ynl_attr_get_str(attr), len);
# 215| dst->transport_name[len] = 0;
# 216| }
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:449:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)(len + 1))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:413:5: enter_function: entry to ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:424:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: call_function: calling ‘ynl_attr_first’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: return_function: returning to ‘nfsd_threads_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:428:37: call_function: inlined call to ‘ynl_attr_type’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:432:27: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:437:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:437:27: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:442:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:442:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:443:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:443:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:446:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:448:38: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:449:25: danger: ‘malloc((long unsigned int)(len + 1))’ leaks here; was allocated at [(27)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/26)
# 447| dst->_len.scope = len;
# 448| dst->scope = malloc(len + 1);
# 449|-> memcpy(dst->scope, ynl_attr_get_str(attr), len);
# 450| dst->scope[len] = 0;
# 451| }
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:449:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:413:5: enter_function: entry to ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:424:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: call_function: calling ‘ynl_attr_first’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: return_function: returning to ‘nfsd_threads_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:428:37: call_function: inlined call to ‘ynl_attr_type’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:432:27: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:437:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:437:27: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:442:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:442:27: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:443:29: call_function: inlined call to ‘ynl_attr_validate’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:443:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:446:63: call_function: inlined call to ‘ynl_attr_data_len’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:448:38: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:449:25: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(27)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/26) could be NULL where non-null expected
# 447| dst->_len.scope = len;
# 448| dst->scope = malloc(len + 1);
# 449|-> memcpy(dst->scope, ynl_attr_get_str(attr), len);
# 450| dst->scope[len] = 0;
# 451| }
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:458:17: warning[-Wanalyzer-malloc-leak]: leak of ‘calloc((long unsigned int)n_threads, 4)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:424:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: following ‘false’ branch (when ‘attr’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:454:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:454:12: branch_true: following ‘true’ branch (when ‘n_threads != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:455:32: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:455:32: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:458:17: danger: ‘calloc((long unsigned int)n_threads, 4)’ leaks here; was allocated at [(7)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/6)
# 456| dst->_count.threads = n_threads;
# 457| i = 0;
# 458|-> ynl_attr_for_each(attr, nlh, yarg->ys->family->hdr_len) {
# 459| if (ynl_attr_type(attr) == NFSD_A_SERVER_THREADS) {
# 460| dst->threads[i] = ynl_attr_get_u32(attr);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:460:33: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc((long unsigned int)n_threads, 4)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:413:5: enter_function: entry to ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:424:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:427:9: branch_false: following ‘false’ branch (when ‘attr’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:454:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:454:12: branch_true: following ‘true’ branch (when ‘n_threads != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:455:32: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:455:32: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:458:17: call_function: calling ‘ynl_attr_first’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:458:17: return_function: returning to ‘nfsd_threads_get_rsp_parse’ from ‘ynl_attr_first’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:458:17: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:459:29: call_function: inlined call to ‘ynl_attr_type’ from ‘nfsd_threads_get_rsp_parse’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/net/ynl/generated/nfsd-user.c:460:33: danger: ‘calloc((long unsigned int)n_threads, 4) + (long unsigned int)i * 4’ could be NULL: unchecked value from [(8)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/7)
# 458| ynl_attr_for_each(attr, nlh, yarg->ys->family->hdr_len) {
# 459| if (ynl_attr_type(attr) == NFSD_A_SERVER_THREADS) {
# 460|-> dst->threads[i] = ynl_attr_get_u32(attr);
# 461| i++;
# 462| }
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:31:16: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1015:15: enter_function: entry to ‘elf_init_reloc_text_sym’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1024:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1029:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1029:12: branch_true: following ‘true’ branch (when ‘sym’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1036:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1036:23: call_function: calling ‘elf_create_section_symbol’ from ‘elf_init_reloc_text_sym’
# 29| static inline u32 str_hash(const char *str)
# 30| {
# 31|-> return jhash(str, strlen(str), 0);
# 32| }
# 33|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:31:16: warning[-Wanalyzer-malloc-leak]: leak of ‘sec’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1589:17: enter_function: entry to ‘elf_create_rela_section’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1596:12: branch_false: following ‘false’ branch (when ‘rsec_name’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1600:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1603:16: call_function: calling ‘elf_create_section’ from ‘elf_create_rela_section’
# 29| static inline u32 str_hash(const char *str)
# 30| {
# 31|-> return jhash(str, strlen(str), 0);
# 32| }
# 33|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:31:16: warning[-Wanalyzer-malloc-leak]: leak of ‘sym’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1015:15: enter_function: entry to ‘elf_init_reloc_text_sym’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1024:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1029:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1029:12: branch_true: following ‘true’ branch (when ‘sym’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1036:23: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/objtool/elf.c:1036:23: call_function: calling ‘elf_create_section_symbol’ from ‘elf_init_reloc_text_sym’
# 29| static inline u32 str_hash(const char *str)
# 30| {
# 31|-> return jhash(str, strlen(str), 0);
# 32| }
# 33|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pipe_1[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: danger: use of uninitialized value ‘pipe_1[0]’ here
# 248|
# 249| if (t == 0) {
# 250|-> td->pipe_read = pipe_1[0];
# 251| td->pipe_write = pipe_2[1];
# 252| } else {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:251:42: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pipe_2[1]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:251:42: danger: use of uninitialized value ‘pipe_2[1]’ here
# 249| if (t == 0) {
# 250| td->pipe_read = pipe_1[0];
# 251|-> td->pipe_write = pipe_2[1];
# 252| } else {
# 253| td->pipe_write = pipe_1[1];
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe_1[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:216:5: enter_function: entry to ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_false: following ‘false’ branch (when ‘t != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:253:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_false: following ‘false’ branch (when ‘t == 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:273:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:276:20: branch_false: following ‘false’ branch (when ‘pid != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: call_function: calling ‘worker_thread’ from ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: return_function: returning to ‘bench_sched_pipe’ from ‘worker_thread’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: danger: ‘pipe_1[0]’ leaks here
# 292|
# 293| if (threads[0].cgroup_failed || threads[1].cgroup_failed)
# 294|-> return 0;
# 295|
# 296| switch (bench_format) {
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe_1[1]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:216:5: enter_function: entry to ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_false: following ‘false’ branch (when ‘t != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:253:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_false: following ‘false’ branch (when ‘t == 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:273:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:276:20: branch_false: following ‘false’ branch (when ‘pid != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: call_function: calling ‘worker_thread’ from ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: return_function: returning to ‘bench_sched_pipe’ from ‘worker_thread’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: danger: ‘pipe_1[1]’ leaks here
# 292|
# 293| if (threads[0].cgroup_failed || threads[1].cgroup_failed)
# 294|-> return 0;
# 295|
# 296| switch (bench_format) {
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe_2[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:216:5: enter_function: entry to ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_false: following ‘false’ branch (when ‘t != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:253:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_false: following ‘false’ branch (when ‘t == 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:273:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:276:20: branch_false: following ‘false’ branch (when ‘pid != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: call_function: calling ‘worker_thread’ from ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: return_function: returning to ‘bench_sched_pipe’ from ‘worker_thread’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: danger: ‘pipe_2[0]’ leaks here
# 292|
# 293| if (threads[0].cgroup_failed || threads[1].cgroup_failed)
# 294|-> return 0;
# 295|
# 296| switch (bench_format) {
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe_2[1]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:216:5: enter_function: entry to ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_true: following ‘true’ branch (when ‘t == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:250:41: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_true: following ‘true’ branch (when ‘t != 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:245:30: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:249:20: branch_false: following ‘false’ branch (when ‘t != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:253:42: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:244:21: branch_false: following ‘false’ branch (when ‘t == 2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:258:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:273:23: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:276:20: branch_false: following ‘false’ branch (when ‘pid != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: call_function: calling ‘worker_thread’ from ‘bench_sched_pipe’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:280:25: return_function: returning to ‘bench_sched_pipe’ from ‘worker_thread’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/bench/sched-pipe.c:294:24: danger: ‘pipe_2[1]’ leaks here
# 292|
# 293| if (threads[0].cgroup_failed || threads[1].cgroup_failed)
# 294|-> return 0;
# 295|
# 296| switch (bench_format) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-diff.c: scope_hint: In function ‘setup_compute’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-diff.c:244:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 244 | option = strchr(str, ':');
# | ^
# 242| }
# 243|
# 244|-> option = strchr(str, ':');
# 245| if (option) {
# 246| unsigned len = option++ - str;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-diff.c:244:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 242| }
# 243|
# 244|-> option = strchr(str, ':');
# 245| if (option) {
# 246| unsigned len = option++ - str;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-list.c: scope_hint: In function ‘cmd_list’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-list.c:723:31: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 723 | else if ((sep = strchr(argv[i], ':')) != NULL) {
# | ^
# 721| print_libpfm_events(&print_cb, ps);
# 722| #endif
# 723|-> else if ((sep = strchr(argv[i], ':')) != NULL) {
# 724| char *old_pmu_glob = ps->pmu_glob;
# 725| char *old_event_glob = ps->event_glob;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-list.c:723:31: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 721| print_libpfm_events(&print_cb, ps);
# 722| #endif
# 723|-> else if ((sep = strchr(argv[i], ':')) != NULL) {
# 724| char *old_pmu_glob = ps->pmu_glob;
# 725| char *old_event_glob = ps->event_glob;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:672:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘parms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3662:12: enter_function: entry to ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3670:15: call_function: calling ‘setup_cpus_switch_event’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3670:15: return_function: returning to ‘perf_sched__replay’ from ‘setup_cpus_switch_event’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3671:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3674:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3674:9: call_function: calling ‘calibrate_run_measurement_overhead’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3674:9: return_function: returning to ‘perf_sched__replay’ from ‘calibrate_run_measurement_overhead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3675:9: call_function: calling ‘calibrate_sleep_measurement_overhead’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3675:9: return_function: returning to ‘perf_sched__replay’ from ‘calibrate_sleep_measurement_overhead’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3679:15: call_function: calling ‘perf_sched__read_events’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3679:15: return_function: returning to ‘perf_sched__replay’ from ‘perf_sched__read_events’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3680:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3683:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3687:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3689:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3689:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3691:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3691:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3695:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3695:9: call_function: calling ‘print_task_traces’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3695:9: return_function: returning to ‘perf_sched__replay’ from ‘print_task_traces’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3696:9: call_function: calling ‘add_cross_task_wakeups’ from ‘perf_sched__replay’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3696:9: return_function: returning to ‘perf_sched__replay’ from ‘add_cross_task_wakeups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-sched.c:3699:9: call_function: calling ‘create_tasks’ from ‘perf_sched__replay’
# 670| struct sched_thread_parms *parms = malloc(sizeof(*parms));
# 671| BUG_ON(parms == NULL);
# 672|-> parms->task = task = sched->tasks[i];
# 673| parms->sched = sched;
# 674| parms->fd = self_open_counters(sched, i);
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-trace.c: scope_hint: In function ‘trace__parse_events_option’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-trace.c:5192:26: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 5192 | if ((sep = strchr(s, ',')) != NULL)
# | ^
# 5190|
# 5191| while (1) {
# 5192|-> if ((sep = strchr(s, ',')) != NULL)
# 5193| *sep = '\0';
# 5194|
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/builtin-trace.c:5192:26: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 5190|
# 5191| while (1) {
# 5192|-> if ((sep = strchr(s, ',')) != NULL)
# 5193| *sep = '\0';
# 5194|
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/jvmti/libjvmti.c: scope_hint: In function ‘copy_class_filename’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/jvmti/libjvmti.c:145:27: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 145 | char *p = strrchr(class_sign, '/');
# | ^~~~~~~
# 143| if (*class_sign == 'L') {
# 144| size_t j, i = 0;
# 145|-> char *p = strrchr(class_sign, '/');
# 146| if (p) {
# 147| /* drop the 'L' prefix and copy up to the final '/' */
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/jvmti/libjvmti.c:145:27: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 143| if (*class_sign == 'L') {
# 144| size_t j, i = 0;
# 145|-> char *p = strrchr(class_sign, '/');
# 146| if (p) {
# 147| /* drop the 'L' prefix and copy up to the final '/' */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/libapi/include/api/io.h:135:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dec’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:241:5: enter_function: entry to ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:245:34: call_function: calling ‘evsel__tool_event’ from ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:245:34: return_function: returning to ‘evsel__tool_pmu_open’ from ‘evsel__tool_event’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:248:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:251:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:251:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:262:39: branch_true: following ‘true’ branch (when ‘idx < end_cpu_map_idx’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:262:39: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:267:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:272:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:272:36: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:277:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:287:36: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:291:46: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:292:36: branch_true: following ‘true’ branch (when ‘pid >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:293:47: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:293:47: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:293:47: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:293:47: call_function: calling ‘read_pid_stat_field’ from ‘evsel__tool_pmu_open’
# 133| bool first_read = true;
# 134|
# 135|-> *dec = 0;
# 136| while (true) {
# 137| int ch = io__get_char(io);
Error: GCC_ANALYZER_WARNING (CWE-122):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:769:33: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:776:5: enter_function: entry to ‘cmd_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:807:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:810:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:816:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:817:26: call_function: calling ‘build_suites’ from ‘cmd_test’
# 767| }
# 768| if ((!exclusive && pass == 1) || (exclusive && pass == 2))
# 769|-> result[n++] = t;
# 770| }
# 771| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:769:33: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘result’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:776:5: enter_function: entry to ‘cmd_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:807:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:810:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:816:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/builtin-test.c:817:26: call_function: calling ‘build_suites’ from ‘cmd_test’
# 767| }
# 768| if ((!exclusive && pass == 1) || (exclusive && pass == 2))
# 769|-> result[n++] = t;
# 770| }
# 771| }
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/parse-events.c: scope_hint: In function ‘test_events’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/parse-events.c:2615:29: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2615 | while ((end = strstr(pos, "default_core"))) {
# | ^
# 2613| char buf[1024], *buf_pos = buf, *end;
# 2614|
# 2615|-> while ((end = strstr(pos, "default_core"))) {
# 2616| size_t len = end - pos;
# 2617|
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/parse-events.c:2615:29: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2613| char buf[1024], *buf_pos = buf, *end;
# 2614|
# 2615|-> while ((end = strstr(pos, "default_core"))) {
# 2616| size_t len = end - pos;
# 2617|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<U9c80>.pkey)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:958:39: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: danger: ‘strdup(*cur.<U9c80>.pkey)’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
# 956| i = 1;
# 957| hashmap__for_each_entry(ctx->ids, cur, bkt)
# 958|-> expr__add_id_val(ctx, strdup(cur->pkey), i++);
# 959|
# 960| hashmap__for_each_entry(ctx->ids, cur, bkt) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<U9c80>.pkey)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:975:47: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: danger: ‘strdup(*cur.<U9c80>.pkey)’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 973| i = 1024;
# 974| hashmap__for_each_entry(ctx->ids, cur, bkt)
# 975|-> expr__add_id_val(ctx, strdup(cur->pkey), i--);
# 976| if (expr__parse(&result, ctx, str)) {
# 977| pr_err("expr__parse failed for %s\n", metric_name);
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/sw-clock.c: scope_hint: In function ‘__test__sw_clock_freq’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/tests/sw-clock.c:31:22: warning[-Wunused-but-set-variable=]: variable ‘tmp’ set but not used
# 31 | volatile int tmp = 0;
# | ^~~
# 29| {
# 30| int i, err = -1;
# 31|-> volatile int tmp = 0;
# 32| u64 total_periods = 0;
# 33| int nr_samples = 0;
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/trace/beauty/generated/arch_errno_name_array.c:974:14: warning[-Wanalyzer-null-argument]: use of NULL ‘arch’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:613:13: enter_function: entry to ‘perf_env__arch_strerrno’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:616:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:617:38: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:617:38: call_function: calling ‘perf_env__arch’ from ‘perf_env__arch_strerrno’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:617:38: return_function: returning to ‘perf_env__arch_strerrno’ from ‘perf_env__arch’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/env.c:617:38: call_function: calling ‘arch_syscalls__strerrno_function’ from ‘perf_env__arch_strerrno’
# 972| arch_syscalls__strerrno_function(const char *arch)
# 973| {
# 974|-> if (!strcmp(arch, "alpha"))
# 975| return errno_to_name__alpha;
# 976| if (!strcmp(arch, "mips"))
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/bpf-event.c: scope_hint: In function ‘kallsyms_process_symbol’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/bpf-event.c:740:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 740 | module = strchr(_name, '\t');
# | ^
# 738| int err = 0;
# 739|
# 740|-> module = strchr(_name, '\t');
# 741| if (!module)
# 742| return 0;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/bpf-event.c:740:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 738| int err = 0;
# 739|
# 740|-> module = strchr(_name, '\t');
# 741| if (!module)
# 742| return 0;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/demangle-java.c: scope_hint: In function ‘java_demangle_sym’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/demangle-java.c:168:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 168 | p = strrchr(str, ')');
# | ^
# 166|
# 167| /* find start of return type */
# 168|-> p = strrchr(str, ')');
# 169| if (!p)
# 170| return NULL;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/demangle-java.c:168:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 166|
# 167| /* find start of return type */
# 168|-> p = strrchr(str, ')');
# 169| if (!p)
# 170| return NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/dsos.c:325:1: warning[-Wanalyzer-malloc-leak]: leak of ‘base’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/dsos.c:327:20: enter_function: entry to ‘__dsos__addnew_id’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/dsos.c:331:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/dsos.c:337:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/dsos.c:337:17: call_function: calling ‘dso__set_basename’ from ‘__dsos__addnew_id’
# 323| }
# 324| dso__set_short_name(dso, base, true);
# 325|-> }
# 326|
# 327| static struct dso *__dsos__addnew_id(struct dsos *dsos, const char *name, const struct dso_id *id)
Error: GCC_ANALYZER_WARNING (CWE-1341):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1545:9: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘go_pipe[0]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1439:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1444:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1444:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1449:32: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1450:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1455:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1455:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1512:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1530:9: release_resource: first ‘close’ here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1534:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1535:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1545:9: danger: second ‘close’ here; first ‘close’ was at [(12)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/11)
# 1543|
# 1544| out_close_pipes:
# 1545|-> close(go_pipe[0]);
# 1546| close(go_pipe[1]);
# 1547| out_close_ready_pipe:
Error: GCC_ANALYZER_WARNING (CWE-1341):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1549:9: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘child_ready_pipe[1]’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1439:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1444:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1444:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1449:32: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1450:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1455:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1455:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1512:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1529:9: release_resource: first ‘close’ here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1534:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1535:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1549:9: danger: second ‘close’ here; first ‘close’ was at [(12)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/11)
# 1547| out_close_ready_pipe:
# 1548| close(child_ready_pipe[0]);
# 1549|-> close(child_ready_pipe[1]);
# 1550| return -1;
# 1551| }
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c: scope_hint: In function ‘evlist__parse_control’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1959:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 1959 | comma = strchr(str, ',');
# | ^
# 1957| return -EINVAL;
# 1958|
# 1959|-> comma = strchr(str, ',');
# 1960| if (comma) {
# 1961| if (endptr != comma)
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/evlist.c:1959:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 1957| return -EINVAL;
# 1958|
# 1959|-> comma = strchr(str, ',');
# 1960| if (comma) {
# 1961| if (endptr != comma)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:205:55: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyvsp[1152921504606846975].str’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_false: following ‘false’ branch (when ‘yyn != -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_true: following ‘true’ branch (when ‘yychar == -2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1197:16: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1206:11: branch_false: following ‘false’ branch (when ‘yychar != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1218:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1225:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1228:6: branch_false: following ‘false’ branch (when ‘yyn > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: following ‘false’ branch (when ‘yyerrstatus == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1245:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_true: following ‘true’ branch (when ‘yyn == -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1189:5: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1258:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1260:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:205:55: danger: use of uninitialized value ‘yyvsp[1152921504606846975].str’ here
# 203| }
# 204| | ID { $$ = handle_id(ctx, $1, compute_ids, /*source_count=*/false); }
# 205|-> | SOURCE_COUNT '(' ID ')' { $$ = handle_id(ctx, $3, compute_ids, /*source_count=*/true); }
# 206| | HAS_EVENT '(' ID ')'
# 207| {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:316:37: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_false: following ‘false’ branch (when ‘yyn != -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_true: following ‘true’ branch (when ‘yychar == -2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1197:16: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1206:11: branch_false: following ‘false’ branch (when ‘yychar != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1218:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1225:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1228:6: branch_false: following ‘false’ branch (when ‘yyn > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: following ‘false’ branch (when ‘yyerrstatus == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1245:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_true: following ‘true’ branch (when ‘yyn == -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1189:5: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1258:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1260:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:316:19: branch_true: following ‘true’ branch (when ‘compute_ids != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:316:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:316:37: danger: out-of-bounds read from byte -8 till byte -1 but ‘yyvsa’ starts at byte 0
# 314| pr_debug("division by zero\n");
# 315| YYABORT;
# 316|-> } else if (!compute_ids || (is_const($1.val) && is_const($3.val))) {
# 317| assert($1.ids == NULL);
# 318| assert($3.ids == NULL);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:319:41: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_false: following ‘false’ branch (when ‘yyn != -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_true: following ‘true’ branch (when ‘yychar == -2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1197:16: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1206:11: branch_false: following ‘false’ branch (when ‘yychar != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1218:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1225:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1228:6: branch_false: following ‘false’ branch (when ‘yyn > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: following ‘false’ branch (when ‘yyerrstatus == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1245:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_true: following ‘true’ branch (when ‘yyn == -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1189:5: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1258:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1260:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:319:41: danger: out-of-bounds read from byte -8 till byte -1 but ‘yyvsa’ starts at byte 0
# 317| assert($1.ids == NULL);
# 318| assert($3.ids == NULL);
# 319|-> $$.val = (long)$1.val % (long)$3.val;
# 320| $$.ids = NULL;
# 321| } else {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:328:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyvsp[1152921504606846975].ids.val’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_false: following ‘false’ branch (when ‘yyn != -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1194:6: branch_true: following ‘true’ branch (when ‘yychar == -2’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1197:16: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1206:11: branch_false: following ‘false’ branch (when ‘yychar != 256’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1218:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1225:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1228:6: branch_false: following ‘false’ branch (when ‘yyn > 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1238:6: branch_false: following ‘false’ branch (when ‘yyerrstatus == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1245:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1109:6: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1173:6: branch_false: following ‘false’ branch (when ‘yystate != 23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1176:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1188:6: branch_true: following ‘true’ branch (when ‘yyn == -23’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1189:5: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1258:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr-bison.c:1260:3: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/expr.y:328:13: danger: use of uninitialized value ‘yyvsp[1152921504606846975].ids.val’ here
# 326| | D_RATIO '(' expr ',' expr ')'
# 327| {
# 328|-> if (fpclassify($5.val) == FP_ZERO) {
# 329| /*
# 330| * Division by constant zero always yields zero and no events
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/hwmon_pmu.c: scope_hint: In function ‘parse_hwmon_filename’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/hwmon_pmu.c:189:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 189 | elem = bsearch(&fn_type, hwmon_type_strs + 1, ARRAY_SIZE(hwmon_type_strs) - 1,
# | ^
# 187| return false;
# 188| }
# 189|-> elem = bsearch(&fn_type, hwmon_type_strs + 1, ARRAY_SIZE(hwmon_type_strs) - 1,
# 190| sizeof(hwmon_type_strs[0]), hwmon_strcmp);
# 191| if (!elem) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/hwmon_pmu.c:189:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 187| return false;
# 188| }
# 189|-> elem = bsearch(&fn_type, hwmon_type_strs + 1, ARRAY_SIZE(hwmon_type_strs) - 1,
# 190| sizeof(hwmon_type_strs[0]), hwmon_strcmp);
# 191| if (!elem) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/hwmon_pmu.c:209:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 209 | elem = bsearch(fn_item, hwmon_item_strs + 1, ARRAY_SIZE(hwmon_item_strs) - 1,
# | ^
# 207| *alarm = true;
# 208| }
# 209|-> elem = bsearch(fn_item, hwmon_item_strs + 1, ARRAY_SIZE(hwmon_item_strs) - 1,
# 210| sizeof(hwmon_item_strs[0]), hwmon_strcmp);
# 211| if (!elem) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/hwmon_pmu.c:209:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 207| *alarm = true;
# 208| }
# 209|-> elem = bsearch(fn_item, hwmon_item_strs + 1, ARRAY_SIZE(hwmon_item_strs) - 1,
# 210| sizeof(hwmon_item_strs[0]), hwmon_strcmp);
# 211| if (!elem) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/jitdump.c: scope_hint: In function ‘jit_detect’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/jitdump.c:769:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 769 | p = strrchr(mmap_name, '/');
# | ^
# 767| * get file name
# 768| */
# 769|-> p = strrchr(mmap_name, '/');
# 770| if (!p)
# 771| return -1;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/jitdump.c:769:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 767| * get file name
# 768| */
# 769|-> p = strrchr(mmap_name, '/');
# 770| if (!p)
# 771| return -1;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c: scope_hint: In function ‘match_metric_or_groups’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c:382:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 382 | m = strchr(metric_or_groups, ';');
# | ^
# 380| (metric_or_groups[len] == 0 || metric_or_groups[len] == ';'))
# 381| return true;
# 382|-> m = strchr(metric_or_groups, ';');
# 383| return m && match_metric_or_groups(m + 1, sought);
# 384| }
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c:382:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 380| (metric_or_groups[len] == 0 || metric_or_groups[len] == ';'))
# 381| return true;
# 382|-> m = strchr(metric_or_groups, ';');
# 383| return m && match_metric_or_groups(m + 1, sought);
# 384| }
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c: scope_hint: In function ‘encode_metric_id’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c:457:19: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 457 | c = strchr(code_characters, *x);
# | ^
# 455|
# 456| for (; *x; x++) {
# 457|-> c = strchr(code_characters, *x);
# 458| if (c) {
# 459| ret = strbuf_addch(sb, '!');
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/metricgroup.c:457:19: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 455|
# 456| for (; *x; x++) {
# 457|-> c = strchr(code_characters, *x);
# 458| if (c) {
# 459| ret = strbuf_addch(sb, '!');
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:148:21: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 146| u64 num;
# 147|
# 148|-> if (term->type_term != PARSE_EVENTS__TERM_TYPE_RAW)
# 149| continue;
# 150|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:151:47: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 149| continue;
# 150|
# 151|-> if (perf_pmu__have_event(pmu, term->val.str)) {
# 152| zfree(&term->config);
# 153| term->config = term->val.str;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:153:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 151| if (perf_pmu__have_event(pmu, term->val.str)) {
# 152| zfree(&term->config);
# 153|-> term->config = term->val.str;
# 154| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 155| term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:153:40: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 151| if (perf_pmu__have_event(pmu, term->val.str)) {
# 152| zfree(&term->config);
# 153|-> term->config = term->val.str;
# 154| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 155| term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:154:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 152| zfree(&term->config);
# 153| term->config = term->val.str;
# 154|-> term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 155| term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
# 156| term->val.num = 1;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:155:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 153| term->config = term->val.str;
# 154| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 155|-> term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
# 156| term->val.num = 1;
# 157| term->no_value = true;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:156:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 154| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 155| term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
# 156|-> term->val.num = 1;
# 157| term->no_value = true;
# 158| continue;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:157:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 155| term->type_term = PARSE_EVENTS__TERM_TYPE_USER;
# 156| term->val.num = 1;
# 157|-> term->no_value = true;
# 158| continue;
# 159| }
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:162:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 160|
# 161| zfree(&term->config);
# 162|-> term->config = strdup("config");
# 163| errno = 0;
# 164| num = strtoull(term->val.str + 1, NULL, 16);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:164:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 162| term->config = strdup("config");
# 163| errno = 0;
# 164|-> num = strtoull(term->val.str + 1, NULL, 16);
# 165| assert(errno == 0);
# 166| free(term->val.str);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:166:22: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 164| num = strtoull(term->val.str + 1, NULL, 16);
# 165| assert(errno == 0);
# 166|-> free(term->val.str);
# 167| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 168| term->type_term = PARSE_EVENTS__TERM_TYPE_CONFIG;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:167:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 165| assert(errno == 0);
# 166| free(term->val.str);
# 167|-> term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 168| term->type_term = PARSE_EVENTS__TERM_TYPE_CONFIG;
# 169| term->val.num = num;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:168:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 166| free(term->val.str);
# 167| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 168|-> term->type_term = PARSE_EVENTS__TERM_TYPE_CONFIG;
# 169| term->val.num = num;
# 170| term->no_value = false;
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:169:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 167| term->type_val = PARSE_EVENTS__TERM_TYPE_NUM;
# 168| term->type_term = PARSE_EVENTS__TERM_TYPE_CONFIG;
# 169|-> term->val.num = num;
# 170| term->no_value = false;
# 171| }
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:170:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1636:5: enter_function: entry to ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1649:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1652:9: call_function: inlined call to ‘INIT_LIST_HEAD’ from ‘parse_events_multi_pmu_add_or_add_pmu’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:12: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/parse-events.c:1656:21: call_function: calling ‘parse_events_add_pmu’ from ‘parse_events_multi_pmu_add_or_add_pmu’
# 168| term->type_term = PARSE_EVENTS__TERM_TYPE_CONFIG;
# 169| term->val.num = num;
# 170|-> term->no_value = false;
# 171| }
# 172| }
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/print-events.c: scope_hint: In function ‘print_sdt_events’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/print-events.c:89:29: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 89 | char *bid = strchr(sdt_name->s, '@');
# | ^~~~~~
# 87| strlist__for_each_entry(sdt_name, sdtlist) {
# 88| bool show_detail = false;
# 89|-> char *bid = strchr(sdt_name->s, '@');
# 90| char *evt_name = NULL;
# 91|
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/print-events.c:89:29: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 87| strlist__for_each_entry(sdt_name, sdtlist) {
# 88| bool show_detail = false;
# 89|-> char *bid = strchr(sdt_name->s, '@');
# 90| char *evt_name = NULL;
# 91|
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/print-events.c:100:46: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 100 | char *bid2 = strchr(next_sdt_name->s, '@');
# | ^~~~~~
# 98| next_sdt_name = strlist__next(sdt_name);
# 99| if (next_sdt_name) {
# 100|-> char *bid2 = strchr(next_sdt_name->s, '@');
# 101|
# 102| if (bid2)
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/print-events.c:100:46: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 98| next_sdt_name = strlist__next(sdt_name);
# 99| if (next_sdt_name) {
# 100|-> char *bid2 = strchr(next_sdt_name->s, '@');
# 101|
# 102| if (bid2)
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1297:12: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(dwarf_diename(sc_die))’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1279:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1283:26: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1283:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1288:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1293:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1296:31: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1296:31: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/probe-finder.c:1297:12: danger: ‘strdup(dwarf_diename(sc_die))’ leaks here; was allocated at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
# 1295|
# 1296| tev->point.realname = strdup(dwarf_diename(sc_die));
# 1297|-> if (!tev->point.realname) {
# 1298| ret = -ENOMEM;
# 1299| goto end;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/session.c: scope_hint: In function ‘map__set_kallsyms_ref_reloc_sym’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/session.c:2637:17: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2637 | bracket = strchr(ref->name, ']');
# | ^
# 2635| }
# 2636|
# 2637|-> bracket = strchr(ref->name, ']');
# 2638| if (bracket)
# 2639| *bracket = '\0';
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/session.c:2637:17: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2635| }
# 2636|
# 2637|-> bracket = strchr(ref->name, ']');
# 2638| if (bracket)
# 2639| *bracket = '\0';
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/strlist.c: scope_hint: In function ‘strlist__parse_list’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/strlist.c:147:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 147 | while ((sep = strchr(s, ',')) != NULL) {
# | ^
# 145| int err;
# 146|
# 147|-> while ((sep = strchr(s, ',')) != NULL) {
# 148| *sep = '\0';
# 149| err = strlist__parse_list_entry(slist, s, subst_dir);
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/strlist.c:147:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 145| int err;
# 146|
# 147|-> while ((sep = strchr(s, ',')) != NULL) {
# 148| *sep = '\0';
# 149| err = strlist__parse_list_entry(slist, s, subst_dir);
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c: scope_hint: In function ‘perf_time__percent_parse_str’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:372:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 372 | c = strchr(ostr, '/');
# | ^
# 370| memset(ptime_buf, 0, sizeof(*ptime_buf) * num);
# 371|
# 372|-> c = strchr(ostr, '/');
# 373| if (c) {
# 374| return percent_comma_split(ptime_buf, num, ostr, start,
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:372:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 370| memset(ptime_buf, 0, sizeof(*ptime_buf) * num);
# 371|
# 372|-> c = strchr(ostr, '/');
# 373| if (c) {
# 374| return percent_comma_split(ptime_buf, num, ostr, start,
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:378:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 378 | c = strchr(ostr, '-');
# | ^
# 376| }
# 377|
# 378|-> c = strchr(ostr, '-');
# 379| if (c) {
# 380| return percent_comma_split(ptime_buf, num, ostr, start,
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:378:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 376| }
# 377|
# 378|-> c = strchr(ostr, '-');
# 379| if (c) {
# 380| return percent_comma_split(ptime_buf, num, ostr, start,
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:384:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 384 | c = strchr(ostr, '%');
# | ^
# 382| }
# 383|
# 384|-> c = strchr(ostr, '%');
# 385| if (c)
# 386| return one_percent_convert(ptime_buf, ostr, start, end, c);
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/time-utils.c:384:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 382| }
# 383|
# 384|-> c = strchr(ostr, '%');
# 385| if (c)
# 386| return one_percent_convert(ptime_buf, ostr, start, end, c);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:286:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:241:5: enter_function: entry to ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:245:34: call_function: calling ‘evsel__tool_event’ from ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:245:34: return_function: returning to ‘evsel__tool_pmu_open’ from ‘evsel__tool_event’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:248:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:251:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:251:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:258:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:262:39: branch_true: following ‘true’ branch (when ‘idx < end_cpu_map_idx’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:262:39: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:267:28: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:272:37: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:272:36: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:277:36: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:277:36: branch_false: following ‘false’ branch (when ‘pid < 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:284:46: call_function: inlined call to ‘open’ from ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:286:33: call_function: inlined call to ‘xyarray__entry’ from ‘evsel__tool_pmu_open’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:286:33: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tool_pmu.c:286:33: danger: dereference of NULL ‘<unknown>’
# 284| fd = open("/proc/stat", O_RDONLY);
# 285| }
# 286|-> FD(evsel, idx, thread) = fd;
# 287| if (fd < 0) {
# 288| err = -errno;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tp_pmu.c: scope_hint: In function ‘tp_pmu__have_event’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tp_pmu.c:195:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 195 | colon = strchr(name, ':');
# | ^
# 193| int id;
# 194|
# 195|-> colon = strchr(name, ':');
# 196| if (colon == NULL)
# 197| return false;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/tp_pmu.c:195:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 193| int id;
# 194|
# 195|-> colon = strchr(name, ':');
# 196| if (colon == NULL)
# 197| return false;
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/trace-event-info.c: scope_hint: In function ‘tracepoint_name_to_path’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/trace-event-info.c:485:21: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 485 | char *str = strchr(name, ':');
# | ^~~~~~
# 483| {
# 484| struct tracepoint_path *path = zalloc(sizeof(*path));
# 485|-> char *str = strchr(name, ':');
# 486|
# 487| if (path == NULL || str == NULL) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/trace-event-info.c:485:21: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 483| {
# 484| struct tracepoint_path *path = zalloc(sizeof(*path));
# 485|-> char *str = strchr(name, ':');
# 486|
# 487| if (path == NULL || str == NULL) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/units.c: scope_hint: In function ‘parse_tag_value’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/units.c:15:27: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 15 | char *s = strchr(str, i->tag);
# | ^~~~~~
# 13|
# 14| while (i->tag) {
# 15|-> char *s = strchr(str, i->tag);
# 16|
# 17| if (s) {
Error: COMPILER_WARNING (CWE-704):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/perf/util/units.c:15:27: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 13|
# 14| while (i->tag) {
# 15|-> char *s = strchr(str, i->tag);
# 16|
# 17| if (s) {
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:212:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 2)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:155:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:158:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:174:12: branch_false: following ‘false’ branch (when ‘pid >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:178:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:178:12: branch_false: following ‘false’ branch (when ‘pid == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:181:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:184:12: branch_false: following ‘false’ branch (when ‘sid >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:188:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:191:13: acquire_resource: opened here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:192:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:195:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:196:12: branch_false: following ‘false’ branch (when ‘ret != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:199:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:200:12: branch_false: following ‘false’ branch (when ‘ret != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:203:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:204:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:212:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:212:12: danger: ‘open("/dev/null", 2)’ leaks here; was opened at [(9)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/8)
# 210| if (lockf(pid_file_handle, F_TLOCK, 0) == -1) {
# 211| #else
# 212|-> if (flock(pid_file_handle, LOCK_EX|LOCK_NB) < 0) {
# 213| #endif
# 214| /* Couldn't get lock on lock file */
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:219:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 2)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:155:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:158:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:174:12: branch_false: following ‘false’ branch (when ‘pid >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:178:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:178:12: branch_false: following ‘false’ branch (when ‘pid == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:181:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:184:12: branch_false: following ‘false’ branch (when ‘sid >= 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:188:18: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:191:13: acquire_resource: opened here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:192:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:195:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:196:12: branch_false: following ‘false’ branch (when ‘ret != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:199:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:200:12: branch_false: following ‘false’ branch (when ‘ret != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:203:27: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:204:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:212:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:212:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:218:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/power/x86/intel-speed-select/isst-daemon.c:219:15: danger: ‘open("/dev/null", 2)’ leaks here; was opened at [(9)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/8)
# 217| }
# 218| snprintf(str, sizeof(str), "%d\n", getpid());
# 219|-> ret = write(pid_file_handle, str, strlen(str));
# 220| if (ret == -1)
# 221| exit(EXIT_FAILURE);
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:242:22: warning[-Wanalyzer-null-argument]: use of NULL ‘___act’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:234:5: enter_function: entry to ‘btf_validate_raw’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:241:21: branch_true: following ‘true’ branch (when ‘i <= nr_types’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:242:22: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:242:22: call_function: calling ‘btf_type_raw_dump’ from ‘btf_validate_raw’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:242:22: return_function: returning to ‘btf_validate_raw’ from ‘btf_type_raw_dump’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/btf_helpers.c:242:22: danger: argument 1 (‘___act’) NULL where non-null expected
# 240|
# 241| for (i = 1; i <= nr_types; i++) {
# 242|-> if (!ASSERT_STREQ(btf_type_raw_dump(btf, i), exp_types[i - 1], "raw_dump"))
# 243| ok = false;
# 244| }
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:220:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘text_out’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:185:20: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:192:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:193:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:196:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:198:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:203:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:205:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:210:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:216:14: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:219:29: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:220:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:220:17: danger: argument 1 (‘text_out’) from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
# 218|
# 219| for (pc = 0, i = 0; i < jited_funcs; ++i) {
# 220|-> fprintf(text_out, "func #%d:\n", i);
# 221| disasm_one_func(text_out, image + pc, func_lens[i]);
# 222| fprintf(text_out, "\n");
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:233:16: warning[-Wanalyzer-malloc-leak]: leak of ‘text_out’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:168:5: enter_function: entry to ‘get_jited_program_text’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:185:20: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:186:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:192:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:193:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:196:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:198:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:203:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:205:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:210:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:216:14: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:219:29: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:220:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:221:17: call_function: calling ‘disasm_one_func’ from ‘get_jited_program_text’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:221:17: return_function: returning to ‘get_jited_program_text’ from ‘disasm_one_func’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:219:29: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:226:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:227:12: branch_false: following ‘false’ branch (when ‘text_out’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:229:12: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:231:12: branch_true: following ‘true’ branch (when ‘func_lens’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:232:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/jit_disasm_helpers.c:233:16: danger: ‘text_out’ leaks here; was allocated at [(2)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/1)
# 231| if (func_lens)
# 232| free(func_lens);
# 233|-> return err;
# 234| }
# 235|
Error: GCC_ANALYZER_WARNING (CWE-835):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:687:16: warning[-Wanalyzer-infinite-loop]: infinite loop
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:687:16: danger: infinite loop here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:687:16: branch_true: when ‘fd == -1’: always following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:688:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:688:20: branch_true: if it ever follows ‘true’ branch, it will always do so...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/network_helpers.c:688:20: branch_true: ...to here
# 685|
# 686| fd = accept(a->fd, NULL, NULL);
# 687|-> while (fd == -1) {
# 688| if (errno == EINTR)
# 689| continue;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1690:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘data’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1684:16: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1687:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1690:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1690:17: danger: ‘data + (long unsigned int)i * 8’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
# 1688| int rc;
# 1689|
# 1690|-> data[i].worker_id = i;
# 1691| data[i].sock_fd = env.worker_socks[i];
# 1692| rc = pthread_create(&dispatcher_threads[i], NULL, dispatch_thread, &data[i]);
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1692:22: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dispatcher_threads’ where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1683:30: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1687:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1690:21: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1692:22: danger: argument 1 (‘dispatcher_threads + (long unsigned int)i * 8’) from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
# 1690| data[i].worker_id = i;
# 1691| data[i].sock_fd = env.worker_socks[i];
# 1692|-> rc = pthread_create(&dispatcher_threads[i], NULL, dispatch_thread, &data[i]);
# 1693| if (rc < 0) {
# 1694| perror("Failed to launch dispatcher thread");
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1702:35: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘dispatcher_threads’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1683:30: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1687:21: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1700:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1700:21: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1702:72: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_progs.c:1702:35: danger: ‘dispatcher_threads + (long unsigned int)i * 8’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
# 1700| for (i = 0; i < env.workers; i++) {
# 1701| while (true) {
# 1702|-> int ret = pthread_tryjoin_np(dispatcher_threads[i], NULL);
# 1703|
# 1704| if (!ret) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2185:25: warning[-Wanalyzer-malloc-leak]: leak of ‘options.whitelist’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2115:16: branch_true: following ‘true’ branch (when ‘opt != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2117:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2185:45: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2186:28: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2188:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2115:16: branch_true: following ‘true’ branch (when ‘opt != -1’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2117:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_sockmap.c:2185:25: danger: ‘options.whitelist’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 2183| break;
# 2184| case 'n':
# 2185|-> options.whitelist = strdup(optarg);
# 2186| if (!options.whitelist)
# 2187| return -ENOMEM;
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_verifier.c:763: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ptr
# 761|
# 762| ptr = raw_btf;
# 763|-> memcpy(ptr, &hdr, sizeof(hdr));
# 764| ptr += sizeof(hdr);
# 765| memcpy(ptr, types, hdr.type_len);
Error: CPPCHECK_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/test_verifier.c:926: error[uninitvar]: Uninitialized variable: name
# 924| memset(&info, 0, sizeof(info));
# 925| info.name_len = sizeof(name);
# 926|-> info.name = ptr_to_u64(name);
# 927| len = sizeof(info);
# 928|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: warning[-Wanalyzer-malloc-leak]: leak of ‘ext_subtest_str’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:130:12: enter_function: entry to ‘insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:145:12: branch_true: following ‘true’ branch (when ‘subtest_str’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:146:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:151:12: branch_false: following ‘false’ branch (when ‘ext_test_str’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:154:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:156:12: branch_true: following ‘true’ branch (when ‘subtest_str’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:157:42: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:157:35: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:158:20: branch_false: following ‘false’ branch (when ‘ext_subtest_str’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:161:17: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: call_function: calling ‘do_insert_test’ from ‘insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: return_function: returning to ‘insert_test’ from ‘do_insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: danger: ‘ext_subtest_str’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 162| }
# 163|
# 164|-> return do_insert_test(set, ext_test_str, ext_subtest_str);
# 165|
# 166| err:
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: warning[-Wanalyzer-malloc-leak]: leak of ‘ext_test_str’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:130:12: enter_function: entry to ‘insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:145:12: branch_false: following ‘false’ branch (when ‘subtest_str’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:150:31: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:150:24: acquire_memory: allocated here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:151:12: branch_false: following ‘false’ branch (when ‘ext_test_str’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:154:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:156:12: branch_false: following ‘false’ branch (when ‘subtest_str’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: call_function: calling ‘do_insert_test’ from ‘insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: return_function: returning to ‘insert_test’ from ‘do_insert_test’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/testing_helpers.c:164:16: danger: ‘ext_test_str’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 162| }
# 163|
# 164|-> return do_insert_test(set, ext_test_str, ext_subtest_str);
# 165|
# 166| err:
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:641:24: warning[-Wanalyzer-malloc-leak]: leak of ‘ksyms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:613:5: enter_function: entry to ‘bpf_get_ksyms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:624:17: call_function: calling ‘load_kallsyms_custom_local’ from ‘bpf_get_ksyms’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:624:17: return_function: returning to ‘bpf_get_ksyms’ from ‘load_kallsyms_custom_local’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:625:12: branch_false: following ‘false’ branch (when ‘ksyms’ is non-NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:635:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:640:12: branch_true: following ‘true’ branch (when ‘f’ is NULL)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:641:24: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/bpf/trace_helpers.c:641:24: danger: ‘ksyms’ leaks here; was allocated at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
# 639|
# 640| if (!f)
# 641|-> return -EINVAL;
# 642|
# 643| map = hashmap__new(symbol_hash, symbol_equal, NULL);
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/lib/cgroup_util.c:62: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
# 60| char *ret = malloc(len);
# 61|
# 62|-> snprintf(ret, len, "%s/%s", root, name);
# 63|
# 64| return ret;
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/lib/cgroup_util.c:72: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
# 70| char *ret = malloc(len);
# 71|
# 72|-> snprintf(ret, len, "%s/%s_%d", root, name, index);
# 73|
# 74| return ret;
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/lib/cgroup_util.c:82: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
# 80| char *ret = malloc(len);
# 81|
# 82|-> snprintf(ret, len, "%s/%s", cgroup, control);
# 83|
# 84| return ret;
Error: CPPCHECK_WARNING (CWE-682):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_memcontrol.c:61: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
# 59|
# 60| buf = malloc(size);
# 61|-> for (ptr = buf; ptr < buf + size; ptr += PAGE_SIZE)
# 62| *ptr = 0;
# 63|
Error: CPPCHECK_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:286: warning[uninitvar]: Uninitialized variable: buf
# 284|
# 285| for (int i = 0; i < memsize; i += pagesize)
# 286|-> memcpy(&mem[i], buf, pagesize);
# 287|
# 288| /* Try and reclaim allocated memory */
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:435: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: control_allocation
# 433| control_allocation = malloc(control_allocation_size);
# 434| for (int i = 0; i < control_allocation_size; i += 4095)
# 435|-> control_allocation[i] = 'a';
# 436| if (cg_read_key_long(control_group, "memory.stat", "zswapped") < 1)
# 437| goto out;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:435:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘control_allocation’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:415:12: enter_function: entry to ‘test_no_invasive_cgroup_shrink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:421:20: call_function: calling ‘setup_test_group_1M’ from ‘test_no_invasive_cgroup_shrink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:421:20: return_function: returning to ‘test_no_invasive_cgroup_shrink’ from ‘setup_test_group_1M’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:422:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:424:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:424:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:426:25: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:426:25: call_function: calling ‘setup_test_group_1M’ from ‘test_no_invasive_cgroup_shrink’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:426:25: return_function: returning to ‘test_no_invasive_cgroup_shrink’ from ‘setup_test_group_1M’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:427:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:431:13: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:431:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:433:30: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:433:30: acquire_memory: this call could return NULL
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:434:25: branch_true: following ‘true’ branch (when ‘i <= 10485759’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:435:35: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/cgroup/test_zswap.c:435:17: danger: ‘control_allocation + (long unsigned int)i’ could be NULL: unchecked value from [(28)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/27)
# 433| control_allocation = malloc(control_allocation_size);
# 434| for (int i = 0; i < control_allocation_size; i += 4095)
# 435|-> control_allocation[i] = 'a';
# 436| if (cg_read_key_long(control_group, "memory.stat", "zswapped") < 1)
# 437| goto out;
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/clone3/clone3_cap_checkpoint_restore.c:56:21: warning[-Wunused-variable]: unused variable ‘ret’
# 56 | int ret;
# | ^~~
# 54|
# 55| if (pid == 0) {
# 56|-> int ret;
# 57| char tmp = 0;
# 58|
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/clone3/clone3_cap_checkpoint_restore.c: scope_hint: In function ‘call_clone3_set_tid’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/clone3/clone3_cap_checkpoint_restore.c:57:22: warning[-Wunused-variable]: unused variable ‘tmp’
# 57 | char tmp = 0;
# | ^~~
# 55| if (pid == 0) {
# 56| int ret;
# 57|-> char tmp = 0;
# 58|
# 59| TH_LOG("I am the child, my PID is %d (expected %d)", getpid(), set_tid[0]);
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/clone3/clone3_cap_checkpoint_restore.c: scope_hint: In function ‘clone3_cap_checkpoint_restore’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/clone3/clone3_cap_checkpoint_restore.c:138:13: warning[-Wunused-variable]: unused variable ‘ret’
# 138 | int ret = 0;
# | ^~~
# 136| pid_t pid;
# 137| int status;
# 138|-> int ret = 0;
# 139| pid_t set_tid[1];
# 140|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ver_cap’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:410:5: enter_function: entry to ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:421:9: call_function: calling ‘parse_cmd_opts’ from ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:421:9: return_function: returning to ‘main’ from ‘parse_cmd_opts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:422:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:425:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:426:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:431:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:432:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:439:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:439:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:453:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:455:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:459:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:459:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:460:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: danger: use of uninitialized value ‘ver_cap’ here
# 461| }
# 462|
# 463|-> if (ver_ena != ver_cap) {
# 464| ret = psp_dev_set_ena(ys, opts.devid, ver_cap);
# 465| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ver_ena’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:410:5: enter_function: entry to ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:421:9: call_function: calling ‘parse_cmd_opts’ from ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:421:9: return_function: returning to ‘main’ from ‘parse_cmd_opts’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:422:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:425:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:426:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:431:20: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:432:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:439:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:439:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:453:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:455:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:459:19: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:459:19: branch_true: following ‘true’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:460:17: branch_true: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: danger: use of uninitialized value ‘ver_ena’ here
# 461| }
# 462|
# 463|-> if (ver_ena != ver_cap) {
# 464| ret = psp_dev_set_ena(ys, opts.devid, ver_cap);
# 465| if (ret)
Error: COMPILER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: warning[-Wmaybe-uninitialized]: ‘ver_cap’ may be used uninitialized
# 463 | if (ver_ena != ver_cap) {
# | ^
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:414:24: note: ‘ver_cap’ was declared here
# 414 | __u32 ver_ena, ver_cap;
# | ^~~~~~~
# 461| }
# 462|
# 463|-> if (ver_ena != ver_cap) {
# 464| ret = psp_dev_set_ena(ys, opts.devid, ver_cap);
# 465| if (ret)
Error: COMPILER_WARNING (CWE-457):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c: scope_hint: In function ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:463:12: warning[-Wmaybe-uninitialized]: ‘ver_ena’ may be used uninitialized
# 463 | if (ver_ena != ver_cap) {
# | ^
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:414:15: note: ‘ver_ena’ was declared here
# 414 | __u32 ver_ena, ver_cap;
# | ^~~~~~~
# 461| }
# 462|
# 463|-> if (ver_ena != ver_cap) {
# 464| ret = psp_dev_set_ena(ys, opts.devid, ver_cap);
# 465| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:45:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:43:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:45:9: danger: argument 3 NULL where non-null expected
# 43| ASSERT_GE(fd_context, 0);
# 44|
# 45|-> ASSERT_LT(execveat(fd_context, "", NULL, NULL, AT_EMPTY_PATH), 0);
# 46| ASSERT_EQ(errno, EACCES);
# 47|
Error: COMPILER_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:9: included_from: Included from here.
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c: scope_hint: In function ‘anon_inode_no_exec’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:45:19: warning[-Wnonnull]: argument 3 null where non-null expected
# 45 | ASSERT_LT(execveat(fd_context, "", NULL, NULL, AT_EMPTY_PATH), 0);
# | ^~~~~~~~
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/kselftest_harness.h:767:40: note: in definition of macro ‘__EXPECT’
# 767 | __typeof__(_expected) __exp = (_expected); \
# | ^~~~~~~~~
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/anon_inode_test.c:45:9: note: in expansion of macro ‘ASSERT_LT’
# 45 | ASSERT_LT(execveat(fd_context, "", NULL, NULL, AT_EMPTY_PATH), 0);
# | ^~~~~~~~~
/usr/include/bits/sigstksz.h:24: included_from: Included from here.
/usr/include/signal.h:328: included_from: Included from here.
/usr/include/sys/wait.h:36: included_from: Included from here.
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/kselftest_harness.h:68: included_from: Included from here.
/usr/include/unistd.h:300:12: note: in a call to function ‘execveat’ declared ‘nonnull’
# 300 | extern int execveat (int __fd, const char *__path, char *const __argv[],
# | ^~~~~~~~
# 43| ASSERT_GE(fd_context, 0);
# 44|
# 45|-> ASSERT_LT(execveat(fd_context, "", NULL, NULL, AT_EMPTY_PATH), 0);
# 46| ASSERT_EQ(errno, EACCES);
# 47|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/fclog.c:37:28: error[-Wimplicit-function-declaration]: implicit declaration of function ‘open’; did you mean ‘popen’?
# 35| {
# 36| /* Stash the old mntns. */
# 37|-> self->host_mntns = open("/proc/self/ns/mnt", O_RDONLY|O_CLOEXEC);
# 38| ASSERT_SUCCESS(self->host_mntns);
# 39|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/fclog.c:37:54: error[error]: ‘O_RDONLY’ undeclared (first use in this function); did you mean ‘MS_RDONLY’?
# 35| {
# 36| /* Stash the old mntns. */
# 37|-> self->host_mntns = open("/proc/self/ns/mnt", O_RDONLY|O_CLOEXEC);
# 38| ASSERT_SUCCESS(self->host_mntns);
# 39|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/filesystems/fclog.c:90:9: error[error]: ‘AT_FDCWD’ undeclared (first use in this function)
# 88| int mfd = fsmount(fsfd, FSMOUNT_CLOEXEC, MOUNT_ATTR_NOEXEC | MOUNT_ATTR_NOSUID);
# 89| ASSERT_SUCCESS(mfd);
# 90|-> ASSERT_SUCCESS(move_mount(mfd, "", AT_FDCWD, "/tmp", MOVE_MOUNT_F_EMPTY_PATH));
# 91|
# 92| /*
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/fs_test.c:6923:17: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/fs_test.c:7005:1: enter_function: entry to ‘wrapper_layout3_fs_release_inodes_teardown’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/fs_test.c:7005:1: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/fs_test.c:7005:1: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/fs_test.c:7005:1: call_function: calling ‘layout3_fs_teardown’ from ‘wrapper_layout3_fs_release_inodes_teardown’
# 6921| * have been removed (cf. release_inode test).
# 6922| */
# 6923|-> rmdir(dir_path);
# 6924| clear_cap(_metadata, CAP_DAC_OVERRIDE);
# 6925| free(dir_path);
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:109:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket_variant(&*self.srv0)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:1811:1: enter_function: entry to ‘port_specific_bind_connect_1023’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:1850:19: call_function: calling ‘socket_variant’ from ‘port_specific_bind_connect_1023’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:1850:19: return_function: returning to ‘port_specific_bind_connect_1023’ from ‘socket_variant’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:1851:9: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:1851:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/landlock/net_test.c:109:22: danger: ‘socket_variant(&*self.srv0)’ leaks here
# 107|
# 108| ret = socket(srv->protocol.domain, srv->protocol.type | SOCK_CLOEXEC,
# 109|-> srv->protocol.protocol);
# 110| if (ret < 0)
# 111| return -errno;
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/memfd/fuse_test.c: scope_hint: In function ‘sealing_thread_fn’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/memfd/fuse_test.c:165:13: warning[-Wunused-variable]: unused variable ‘sig’
# 165 | int sig, r;
# | ^~~
# 163| static int sealing_thread_fn(void *arg)
# 164| {
# 165|-> int sig, r;
# 166|
# 167| /*
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/droppable.c:38: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: (char*)malloc(page_size)
# 36| if (!child) {
# 37| for (;;)
# 38|-> *(char *)malloc(page_size) = 'B';
# 39| }
# 40|
Error: COMPILER_WARNING (CWE-252):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/hugepage-vmemmap.c: scope_hint: In function ‘virt_to_pfn’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/hugepage-vmemmap.c:46:9: warning[-Wunused-result]: ignoring return value of ‘read’ declared with attribute ‘warn_unused_result’
# 46 | read(fd, &pagemap, sizeof(pagemap));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 44|
# 45| lseek(fd, (unsigned long)addr / pagesize * sizeof(pagemap), SEEK_SET);
# 46|-> read(fd, &pagemap, sizeof(pagemap));
# 47| close(fd);
# 48|
Error: COMPILER_WARNING (CWE-252):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/hugepage-vmemmap.c: scope_hint: In function ‘check_page_flags’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/hugepage-vmemmap.c:63:9: warning[-Wunused-result]: ignoring return value of ‘read’ declared with attribute ‘warn_unused_result’
# 63 | read(fd, &pageflags, sizeof(pageflags));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 61| lseek(fd, pfn * sizeof(pageflags), SEEK_SET);
# 62|
# 63|-> read(fd, &pageflags, sizeof(pageflags));
# 64| if ((pageflags & HEAD_PAGE_FLAGS) != HEAD_PAGE_FLAGS) {
# 65| close(fd);
Error: COMPILER_WARNING (CWE-252):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/hugepage-vmemmap.c:76:17: warning[-Wunused-result]: ignoring return value of ‘read’ declared with attribute ‘warn_unused_result’
# 76 | read(fd, &pageflags, sizeof(pageflags));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 74| */
# 75| for (i = 1; i < maplength / pagesize; i++) {
# 76|-> read(fd, &pageflags, sizeof(pageflags));
# 77| if ((pageflags & TAIL_PAGE_FLAGS) != TAIL_PAGE_FLAGS ||
# 78| (pageflags & HEAD_PAGE_FLAGS) == HEAD_PAGE_FLAGS) {
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/pagemap_ioctl.c:1171: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: tmp_buf
# 1169|
# 1170| tmp_buf = malloc(sbuf.st_size);
# 1171|-> memcpy(tmp_buf, fmem, sbuf.st_size);
# 1172|
# 1173| ret = pagemap_ioctl(fmem, sbuf.st_size, vec, vec_size, 0, 0,
Error: COMPILER_WARNING (CWE-252):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/split_huge_page_test.c: scope_hint: In function ‘create_pagecache_thp_and_fd’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/split_huge_page_test.c:627:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
# 627 | write(*fd, buf, sizeof(buf));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 625| buf[i] = (unsigned char)i;
# 626| for (i = 0; i < fd_size; i += sizeof(buf))
# 627|-> write(*fd, buf, sizeof(buf));
# 628|
# 629| close(*fd);
Error: COMPILER_WARNING (CWE-252):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/thuge-gen.c: scope_hint: In function ‘show’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/mm/thuge-gen.c:77:9: warning[-Wunused-result]: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’
# 77 | system(buf);
# | ^~~~~~~~~~~
# 75| "cat /sys/kernel/mm/hugepages/hugepages-%lukB/free_hugepages",
# 76| ps >> 10);
# 77|-> system(buf);
# 78| }
# 79|
Error: CPPCHECK_WARNING (CWE-682):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/openat2/openat2_test.c:116: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
# 114| */
# 115| copy = malloc(misalign + sizeof(how_ext));
# 116|-> how_copy = copy + misalign;
# 117| memset(copy, 0xff, misalign);
# 118| memcpy(how_copy, &how_ext, sizeof(how_ext));
Error: CPPCHECK_WARNING (CWE-476):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/openat2/openat2_test.c:117: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: copy
# 115| copy = malloc(misalign + sizeof(how_ext));
# 116| how_copy = copy + misalign;
# 117|-> memset(copy, 0xff, misalign);
# 118| memcpy(how_copy, &how_ext, sizeof(how_ext));
# 119| }
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:63:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/proc/sys/kernel/pid_max", 524546)’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:44:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:49:9: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:52:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:57:14: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:57:14: acquire_resource: opened here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:58:12: branch_false: following ‘false’ branch...
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:63:15: branch_false: ...to here
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:63:15: danger: ‘open("/proc/sys/kernel/pid_max", 524546)’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 61| }
# 62|
# 63|-> ret = write(fd, "500", sizeof("500") - 1);
# 64| if (ret < 0) {
# 65| fprintf(stderr, "%m - Failed to write pid_max\n");
Error: COMPILER_WARNING (CWE-563):
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c: scope_hint: In function ‘pid_max_nested_outer’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/pid_namespace/pid_max.c:161:17: warning[-Wunused-variable]: unused variable ‘i’
# 161 | int fd, i, ret;
# | ^
# 159| int fret = -1, nr_procs = 400;
# 160| pid_t pids[1000];
# 161|-> int fd, i, ret;
# 162| pid_t pid;
# 163|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/seccomp/seccomp_bpf.c:5175:57: note[note]: first expression has type ‘int (*)(void)’
# 5173| }
# 5174|
# 5175|-> offset = get_uprobe_offset(variant->uretprobe ? probed_uretprobe : probed_uprobe);
# 5176| ASSERT_GE(offset, 0);
# 5177|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/seccomp/seccomp_bpf.c:5175:74: error[-Wincompatible-pointer-types]: pointer type mismatch in conditional expression
# 5173| }
# 5174|
# 5175|-> offset = get_uprobe_offset(variant->uretprobe ? probed_uretprobe : probed_uprobe);
# 5176| ASSERT_GE(offset, 0);
# 5177|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/testing/selftests/seccomp/seccomp_bpf.c:5175:76: note[note]: second expression has type ‘int (__attribute__((nocf_check)) *)(void)’
# 5173| }
# 5174|
# 5175|-> offset = get_uprobe_offset(variant->uretprobe ? probed_uretprobe : probed_uprobe);
# 5176| ASSERT_GE(offset, 0);
# 5177|
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/thermal/tmon/tmon.c: scope_hint: In function ‘main’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/thermal/tmon/tmon.c:233:25: warning[-Wstringop-truncation]: ‘__builtin_strncpy’ specified bound 20 equals destination size
# 233 | strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE);
# | ^
# 231| case 'c':
# 232| no_control = 0;
# 233|-> strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE);
# 234| break;
# 235| case 'd':
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/verification/rv/src/in_kernel.c: scope_hint: In function ‘ikm_list_monitors’
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/verification/rv/src/in_kernel.c:218:9: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 32 equals destination size
# 218 | strncpy(ikm->name, nested_name, MAX_DA_NAME_LEN);
# | ^
# 216| }
# 217|
# 218|-> strncpy(ikm->name, nested_name, MAX_DA_NAME_LEN);
# 219| ikm->enabled = enabled;
# 220| strncpy(ikm->desc, desc, MAX_DESCRIPTION);
Error: COMPILER_WARNING:
kernel-6.19.10/linux-6.19.10-300.fc45.x86_64/tools/verification/rv/src/in_kernel.c:220:9: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 1024 equals destination size
# 220 | strncpy(ikm->desc, desc, MAX_DESCRIPTION);
# | ^
# 218| strncpy(ikm->name, nested_name, MAX_DA_NAME_LEN);
# 219| ikm->enabled = enabled;
# 220|-> strncpy(ikm->desc, desc, MAX_DESCRIPTION);
# 221|
# 222| free(desc);