kf6-solid-6.28.0-3.fc45

List of Findings

Error: COMPILER_WARNING: [#def1] [important]
solid-6.28.0/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-8pXZAL/HAVE_SYS_MNTTAB_H.c:3:10: error[fatal error]: sys/mnttab.h: No such file or directory

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1576:54: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1563:21: enter_function: entry to ‘Solid_create_buffer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1567:31: call_function: inlined call to ‘Solidalloc’ from ‘Solid_create_buffer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1568:12: branch_false: following ‘false’ branch...
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1571:9: branch_false: ...to here
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1576:54: danger: ‘malloc(64)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
# 1574|   	 * we need to put in 2 end-of-buffer characters.
# 1575|   	 */
# 1576|-> 	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 1577|   	if ( ! b->yy_ch_buf )
# 1578|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1619:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1498:10: enter_function: entry to ‘Solidrestart’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1503:9: call_function: calling ‘Solidensure_buffer_stack’ from ‘Solidrestart’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1503:9: return_function: returning to ‘Solidrestart’ from ‘Solidensure_buffer_stack’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1505:13: call_function: calling ‘Solid_create_buffer’ from ‘Solidrestart’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1505:13: return_function: returning to ‘Solidrestart’ from ‘Solid_create_buffer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1508:9: branch_false: following ‘false’ branch...
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1508:9: branch_false: ...to here
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1508:9: call_function: calling ‘Solid_init_buffer’ from ‘Solidrestart’
# 1617|   	yy_flush_buffer( b , yyscanner);
# 1618|   
# 1619|-> 	b->yy_input_file = file;
# 1620|   	b->yy_fill_buffer = 1;
# 1621|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1752:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2264:6: enter_function: entry to ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_scan_string’ from ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: return_function: returning to ‘PredicateParse_initLexer’ from ‘Solid_scan_string’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_switch_to_buffer’ from ‘PredicateParse_initLexer’
# 1750|   
# 1751|   		num_to_alloc = yyg->yy_buffer_stack_max + grow_size;
# 1752|-> 		yyg->yy_buffer_stack = (struct yy_buffer_state**)yyrealloc
# 1753|   								(yyg->yy_buffer_stack,
# 1754|   								num_to_alloc * sizeof(struct yy_buffer_state*)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1811:16: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2264:6: enter_function: entry to ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_scan_string’ from ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: return_function: returning to ‘PredicateParse_initLexer’ from ‘Solid_scan_string’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_switch_to_buffer’ from ‘PredicateParse_initLexer’
# 1809|   {
# 1810|       
# 1811|-> 	return yy_scan_bytes( yystr, (int) strlen(yystr) , yyscanner);
# 1812|   }
# 1813|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1811:16: warning[-Wanalyzer-malloc-leak]: leak of ‘Solid_scan_string(_code,  _scanner)’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2264:6: enter_function: entry to ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_scan_string’ from ‘PredicateParse_initLexer’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: return_function: returning to ‘PredicateParse_initLexer’ from ‘Solid_scan_string’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:2266:5: call_function: calling ‘Solid_switch_to_buffer’ from ‘PredicateParse_initLexer’
# 1809|   {
# 1810|       
# 1811|-> 	return yy_scan_bytes( yystr, (int) strlen(yystr) , yyscanner);
# 1812|   }
# 1813|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1837:33: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1821:17: enter_function: entry to ‘Solid_scan_bytes’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1830:24: call_function: inlined call to ‘Solidalloc’ from ‘Solid_scan_bytes’
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1831:12: branch_false: following ‘false’ branch...
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1831:12: branch_false: ...to here
solid-6.28.0/redhat-linux-build/src/solid/predicate_lexer.c:1839:13: call_function: calling ‘Solid_scan_buffer’ from ‘Solid_scan_bytes’
# 1835|   		buf[i] = yybytes[i];
# 1836|   
# 1837|-> 	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 1838|   
# 1839|   	b = yy_scan_buffer( buf, n , yyscanner);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1010:9: warning[-Wanalyzer-malloc-leak]: leak of ‘yyptr’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1008|           if (! yyptr)
# 1009|             YYNOMEM;
# 1010|->         YYSTACK_RELOCATE (yyss_alloc, yyss);
# 1011|           YYSTACK_RELOCATE (yyvs_alloc, yyvs);
# 1012|   #  undef YYSTACK_RELOCATE

Error: GCC_ANALYZER_WARNING (CWE-457): [#def9]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1010:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1008|           if (! yyptr)
# 1009|             YYNOMEM;
# 1010|->         YYSTACK_RELOCATE (yyss_alloc, yyss);
# 1011|           YYSTACK_RELOCATE (yyvs_alloc, yyvs);
# 1012|   #  undef YYSTACK_RELOCATE

Error: GCC_ANALYZER_WARNING (CWE-457): [#def10]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1148:35: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyvsp[2305843009213693951].ptr’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1146|   
# 1147|     case 3: /* predicate: '[' predicate_or ']'  */
# 1148|->                                 { PredicateParse_setResult( (yyvsp[-1].ptr) ); (yyval.ptr) = (yyvsp[-1].ptr); }
# 1149|       break;
# 1150|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def11]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1152:36: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyvsp[2305843009213693951].ptr’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1150|   
# 1151|     case 4: /* predicate: '[' predicate_and ']'  */
# 1152|->                                  { PredicateParse_setResult( (yyvsp[-1].ptr) ); (yyval.ptr) = (yyvsp[-1].ptr); }
# 1153|       break;
# 1154|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def12]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1156:60: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1154|   
# 1155|     case 5: /* predicate_atom: VAL_ID '.' VAL_ID EQ value  */
# 1156|->                                            { (yyval.ptr) = PredicateParse_newAtom( (yyvsp[-4].name), (yyvsp[-2].name), (yyvsp[0].ptr) ); }
# 1157|       break;
# 1158|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def13]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1160:62: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1158|   
# 1159|     case 6: /* predicate_atom: VAL_ID '.' VAL_ID MASK value  */
# 1160|->                                              { (yyval.ptr) = PredicateParse_newMaskAtom( (yyvsp[-4].name), (yyvsp[-2].name), (yyvsp[0].ptr) ); }
# 1161|       break;
# 1162|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def14]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1172:54: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1170|   
# 1171|     case 9: /* predicate_or: predicate OR predicate  */
# 1172|->                                      { (yyval.ptr) = PredicateParse_newOr( (yyvsp[-2].ptr), (yyvsp[0].ptr) ); }
# 1173|       break;
# 1174|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def15]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1176:56: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1174|   
# 1175|     case 10: /* predicate_and: predicate AND predicate  */
# 1176|->                                        { (yyval.ptr) = PredicateParse_newAnd( (yyvsp[-2].ptr), (yyvsp[0].ptr) ); }
# 1177|       break;
# 1178|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def16]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1200:54: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1198|   
# 1199|     case 16: /* string_list: '{' string_list_rec '}'  */
# 1200|->                                      { (yyval.ptr) = (yyvsp[-2].ptr); }
# 1201|       break;
# 1202|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def17]
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1212:65: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1416:6: enter_function: entry to ‘PredicateParse_mainParse’
solid-6.28.0/redhat-linux-build/src/solid/predicate_parser.c:1421:5: call_function: calling ‘Solidparse’ from ‘PredicateParse_mainParse’
# 1210|   
# 1211|     case 19: /* string_list_rec: VAL_STRING ',' string_list_rec  */
# 1212|->                                                 { (yyval.ptr) = PredicateParse_appendStringListValue( (yyvsp[-2].name), (yyvsp[0].ptr) ); }
# 1213|       break;
# 1214|   

Error: COMPILER_WARNING: [#def18]
solid-6.28.0/src/solid/devices/backends/udisks2/udisksopticaldisc.cpp: scope_hint: In function ‘Solid::OpticalDisc::ContentType advancedDiscDetect(const QByteArray&)’
solid-6.28.0/src/solid/devices/backends/udisks2/udisksopticaldisc.cpp:41:9: warning[-Wunused-but-set-variable=]: variable ‘curr_record’ set but not used
#   41 |     int curr_record = 1;
#      |         ^~~~~~~~~~~
#   39|       int pos = 0;
#   40|       /* the path table record we're on */
#   41|->     int curr_record = 1;
#   42|       /* import debug category */
#   43|       using Solid::Backends::UDisks2::UDISKS2;

Error: COMPILER_WARNING (CWE-477): [#def19]
solid-6.28.0/src/solid/devices/frontend/predicate.cpp: scope_hint: In member function ‘bool Solid::Predicate::matches(const Solid::Device&) const’
solid-6.28.0/src/solid/devices/frontend/predicate.cpp:226:34: warning[-Wdeprecated-declarations]: ‘QSequentialIterable’ is deprecated: Use QMetaSequence's iterables and iterators instead.
#  226 |             if (value.canConvert<QSequentialIterable>()) {
#      |                                  ^~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/QSequentialIterable:1: included_from: Included from here.
solid-6.28.0/src/solid/devices/frontend/predicate.cpp:10: included_from: Included from here.
/usr/include/qt6/QtCore/qsequentialiterable.h:50:106: note: declared here
#   50 | class Q_CORE_EXPORT QT_DEPRECATED_VERSION_X_6_15("Use QMetaSequence's iterables and iterators instead.") QSequentialIterable : public QIterable<QMetaSequence>
#      |                                                                                                          ^~~~~~~~~~~~~~~~~~~
#  224|   
#  225|               // Make sure we can match single elements inside lists.
#  226|->             if (value.canConvert<QSequentialIterable>()) {
#  227|                   const auto iterable = value.value<QSequentialIterable>();
#  228|                   for (const auto &element : iterable) {

Error: COMPILER_WARNING (CWE-477): [#def20]
solid-6.28.0/src/solid/devices/frontend/predicate.cpp:227:51: warning[-Wdeprecated-declarations]: ‘QSequentialIterable’ is deprecated: Use QMetaSequence's iterables and iterators instead.
#  227 |                 const auto iterable = value.value<QSequentialIterable>();
#      |                                                   ^~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/qsequentialiterable.h:50:106: note: declared here
#   50 | class Q_CORE_EXPORT QT_DEPRECATED_VERSION_X_6_15("Use QMetaSequence's iterables and iterators instead.") QSequentialIterable : public QIterable<QMetaSequence>
#      |                                                                                                          ^~~~~~~~~~~~~~~~~~~
#  225|               // Make sure we can match single elements inside lists.
#  226|               if (value.canConvert<QSequentialIterable>()) {
#  227|->                 const auto iterable = value.value<QSequentialIterable>();
#  228|                   for (const auto &element : iterable) {
#  229|                       if (element == expected) {

Scan Properties