Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
libburn-1.5.8/libburn/mmc.c:1080:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'key'
libburn-1.5.8/libburn/mmc.c:949:5: enter_function: entry to 'mmc_write'
libburn-1.5.8/libburn/mmc.c:988:13: call_function: calling 'mmc_function_spy' from 'mmc_write'
libburn-1.5.8/libburn/mmc.c:988:13: return_function: returning to 'mmc_write' from 'mmc_function_spy'
libburn-1.5.8/libburn/mmc.c:988:12: branch_false: following 'false' branch...
libburn-1.5.8/libburn/mmc.c:991:9: branch_false: ...to here
libburn-1.5.8/libburn/mmc.c:992:12: branch_false: following 'false' branch (when 'cancelled == 0')...
libburn-1.5.8/libburn/mmc.c:996:13: branch_false: ...to here
libburn-1.5.8/libburn/mmc.c:1061:12: branch_true: following 'true' branch...
libburn-1.5.8/libburn/mmc.c:1066:20: branch_false: following 'false' branch (when 'msg' is NULL)...
libburn-1.5.8/libburn/mmc.c:1077:21: branch_false: ...to here
libburn-1.5.8/libburn/mmc.c:1077:20: branch_true: following 'true' branch...
libburn-1.5.8/libburn/mmc.c:1080:21: danger: use of uninitialized value 'key' here
# 1078|   		    (d->progress.buffer_capacity == 0 ||
# 1079|   		     start < (off_t) d->progress.buffer_capacity / 2048) &&
# 1080|-> 		    key == 5 && asc == 0x64 && ascq == 0) {
# 1081|   			if (d->write_opts->write_type == BURN_WRITE_TAO) {
# 1082|   				d->was_feat21h_failure = 1 + (start == 0);

Error: COMPILER_WARNING (CWE-457): [#def2]
libburn-1.5.8/libburn/mmc.c: scope_hint: In function 'mmc_read_multi_session_c1'
libburn-1.5.8/libburn/mmc.c:1924:11: warning[-Wmaybe-uninitialized]: 'num' may be used uninitialized
# 1924 |         if(num >= 0x80000000) {
#      |           ^
libburn-1.5.8/libburn/mmc.c:1919:15: note: 'num' was declared here
# 1919 |         off_t num;
#      |               ^
# 1922|   	if (ret <= 0)
# 1923|   		return ret;
# 1924|-> 	if(num >= 0x80000000) {
# 1925|   		*start = 0x7fffffff;
# 1926|   		return 0;

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-20.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibburn-1.5.6-8.fc44
diffbase-store-results-to/tmp/tmprh7_ymjp/libburn-1.5.6-8.fc44.tar.xz
diffbase-time-created2026-08-03 16:58:21
diffbase-time-finished2026-08-03 17:01:07
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmprh7_ymjp/libburn-1.5.6-8.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmprh7_ymjp/libburn-1.5.6-8.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-20.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibburn-1.5.8-2.fc45
store-results-to/tmp/tmp0e673qhv/libburn-1.5.8-2.fc45.tar.xz
time-created2026-08-03 17:01:29
time-finished2026-08-03 17:03:21
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp0e673qhv/libburn-1.5.8-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp0e673qhv/libburn-1.5.8-2.fc45.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9