Error: SHELLCHECK_WARNING (CWE-563): [#def1] /usr/bin/gpg-error-config:15:1: warning[SC2034]: includedir appears unused. Verify use (or export if used externally). # 13| prefix=/usr # 14| exec_prefix=/usr # 15|-> includedir=/usr/include # 16| libdir=/usr/lib # 17| Error: SHELLCHECK_WARNING (CWE-563): [#def2] /usr/bin/gpg-error-config:16:1: warning[SC2034]: libdir appears unused. Verify use (or export if used externally). # 14| exec_prefix=/usr # 15| includedir=/usr/include # 16|-> libdir=/usr/lib # 17| # 18| if echo "$0" | grep gpg-error-config 2>/dev/null >/dev/null; then Error: SHELLCHECK_WARNING (CWE-563): [#def3] /usr/bin/gpg-error-config:52:6: warning[SC2034]: optarg appears unused. Verify use (or export if used externally). # 50| ;; # 51| *) # 52|-> optarg= # 53| ;; # 54| esac Error: SHELLCHECK_WARNING (CWE-569): [#def4] /usr/bin/gpgrt-config:121:3: warning[SC2221]: This pattern always overrides a later one on line 132. # 119| if [ -n "$_reading_attrs" ]; then # 120| case "$_line" in # 121|-> *:\ *) # 122| _key="${_line%%:\ *}" # 123| _value="${_line#*:\ }" Error: SHELLCHECK_WARNING (CWE-569): [#def5] /usr/bin/gpgrt-config:132:6: warning[SC2222]: This pattern never matches because of a previous pattern on line 121. # 130| EOF2 # 131| ;; # 132|-> *:|*:\ ) ;; # 133| *) # 134| echo "Error reading $_filename: $_line" 1>&2 Error: SHELLCHECK_WARNING (CWE-563): [#def6] /usr/bin/gpgrt-config:597:5: warning[SC2034]: VAR_pc_sysrootdir appears unused. Verify use (or export if used externally). # 595| VAR_pc_sysrootdir="/" # 596| else # 597|-> VAR_pc_sysrootdir="$PKG_CONFIG_SYSROOT_DIR" # 598| fi # 599| Error: SHELLCHECK_WARNING (CWE-156): [#def7] /usr/bin/gpgrt-config:696:42: warning[SC2046]: Quote this to prevent word splitting. # 694| if [ -z "$want_var" ] && [ -z "$want_attr" ]; then # 695| if [ -n "$want_cflags" ]; then # 696|-> output="$output${output:+ }$(sysroot -I $(list_only_once $cflags))" # 697| # Backward compatibility to old gpg-error-config # 698| if [ $mt = yes ] && [ -n "$mtcflags" ]; then Error: SHELLCHECK_WARNING (CWE-156): [#def8] /usr/bin/gpgrt-config:703:42: warning[SC2046]: Quote this to prevent word splitting. # 701| fi # 702| if [ -n "$want_libs" ]; then # 703|-> output="$output${output:+ }$(sysroot -L $(list_only_once_for_libs $libs))" # 704| # Backward compatibility to old gpg-error-config # 705| if [ $mt = yes ] && [ -n "$mtlibs" ]; then Error: CPPCHECK_WARNING (CWE-457): [#def9] libgpg-error-1.61/src/argparse.c:1694: error[legacyUninitvar]: Uninitialized variable: keyword # 1692| for (idx=0; idx < nopts; idx++ ) # 1693| { # 1694|-> if (opts[idx].long_opt && !strcmp (opts[idx].long_opt, keyword)) # 1695| break; # 1696| } Error: CPPCHECK_WARNING (CWE-476): [#def10] libgpg-error-1.61/src/logging.c:272: error[nullPointer]: Null pointer dereference: (struct sockaddr_un*)0 # 270| srvr_addr_un.sun_path[sizeof (srvr_addr_un.sun_path)-1] = 0; # 271| srvr_addr = (struct sockaddr *)&srvr_addr_un; # 272|-> addrlen = SUN_LEN (&srvr_addr_un); # 273| name_for_err = srvr_addr_un.sun_path; # 274| } Error: CPPCHECK_WARNING (CWE-476): [#def11] libgpg-error-1.61/src/logging.c:284: error[nullPointer]: Null pointer dereference: (struct sockaddr_un*)0 # 282| srvr_addr_un.sun_path[sizeof (srvr_addr_un.sun_path)-1] = 0; # 283| srvr_addr = (struct sockaddr *)&srvr_addr_un; # 284|-> addrlen = SUN_LEN (&srvr_addr_un); # 285| } # 286| } Error: GCC_ANALYZER_WARNING (CWE-126): [#def12] libgpg-error-1.61/src/logging.c:488:52: warning[-Wanalyzer-out-of-bounds]: buffer over-read libgpg-error-1.61/src/logging.c:1331:1: enter_function: entry to '_gpgrt_logv_clock' libgpg-error-1.61/src/logging.c:1357:3: call_function: calling '_gpgrt_logv_internal' from '_gpgrt_logv_clock' # 486| goto leave; # 487| } # 488|-> else if (name && !strncmp (name, "tcp://", 6) && name[6]) # 489| want_socket = 1; # 490| #ifndef HAVE_W32_SYSTEM Error: CPPCHECK_WARNING (CWE-664): [#def13] libgpg-error-1.61/src/logging.c:1324: error[va_list_usedBeforeStarted]: va_list 'dummy_argptr' used before va_start() was called. # 1322| static va_list dummy_argptr; # 1323| # 1324|-> _gpgrt_logv_printhex (buffer, length, NULL, dummy_argptr); # 1325| } # 1326| } Error: GCC_ANALYZER_WARNING (CWE-775): [#def14] libgpg-error-1.61/src/spawn-posix.c:412:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup2(*act.fd[i], i)' libgpg-error-1.61/src/spawn-posix.c:404:15: branch_true: following 'true' branch (when 'i != 3')... libgpg-error-1.61/src/spawn-posix.c:405:9: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:405:8: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:404:23: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:405:8: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:404:23: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:409:15: branch_true: following 'true' branch (when 'i != 3')... libgpg-error-1.61/src/spawn-posix.c:410:9: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:410:8: branch_true: following 'true' branch... libgpg-error-1.61/src/spawn-posix.c:412:13: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:412:13: acquire_resource: opened here libgpg-error-1.61/src/spawn-posix.c:412:12: danger: 'dup2(*act.fd[i], i)' leaks here; was opened at [(11)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/10) # 410| if (act->fd[i] != i) # 411| { # 412|-> if (dup2 (act->fd[i], i) == -1) # 413| _gpgrt_log_fatal ("dup2 std%s failed: %s\n", # 414| i==0?"in":i==1?"out":"err", strerror (errno)); Error: GCC_ANALYZER_WARNING (CWE-775): [#def15] libgpg-error-1.61/src/spawn-posix.c:615:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_in[0]' libgpg-error-1.61/src/spawn-posix.c:574:1: enter_function: entry to '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:614:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:616:6: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:627:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:654:13: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:655:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:661:3: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:664:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:678:11: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:678:10: branch_true: following 'true' branch... libgpg-error-1.61/src/spawn-posix.c:680:16: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:680:16: call_function: calling 'do_create_pipe' from '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:680:16: return_function: returning to '_gpgrt_process_spawn' from 'do_create_pipe' libgpg-error-1.61/src/spawn-posix.c:681:14: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:699:11: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:701:16: call_function: calling 'do_create_pipe' from '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:701:16: return_function: returning to '_gpgrt_process_spawn' from 'do_create_pipe' libgpg-error-1.61/src/spawn-posix.c:704:18: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:706:19: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:706:18: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:708:15: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:615:12: danger: 'fd_in[0]' leaks here # 613| argv = xtrycalloc (i+2, sizeof *argv); # 614| if (!argv) # 615|-> return _gpg_err_code_from_syserror (); # 616| if (pgmname) # 617| argv[0] = strrchr (pgmname, '/'); Error: GCC_ANALYZER_WARNING (CWE-775): [#def16] libgpg-error-1.61/src/spawn-posix.c:615:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_in[1]' libgpg-error-1.61/src/spawn-posix.c:574:1: enter_function: entry to '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:614:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:616:6: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:627:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:654:13: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:655:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:661:3: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:664:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:678:11: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:678:10: branch_true: following 'true' branch... libgpg-error-1.61/src/spawn-posix.c:680:16: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:680:16: call_function: calling 'do_create_pipe' from '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:680:16: return_function: returning to '_gpgrt_process_spawn' from 'do_create_pipe' libgpg-error-1.61/src/spawn-posix.c:681:14: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:699:11: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:701:16: call_function: calling 'do_create_pipe' from '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:701:16: return_function: returning to '_gpgrt_process_spawn' from 'do_create_pipe' libgpg-error-1.61/src/spawn-posix.c:704:18: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:706:19: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:706:18: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:708:15: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:615:12: danger: 'fd_in[1]' leaks here # 613| argv = xtrycalloc (i+2, sizeof *argv); # 614| if (!argv) # 615|-> return _gpg_err_code_from_syserror (); # 616| if (pgmname) # 617| argv[0] = strrchr (pgmname, '/'); Error: GCC_ANALYZER_WARNING (CWE-775): [#def17] libgpg-error-1.61/src/spawn-posix.c:615:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_out[1]' libgpg-error-1.61/src/spawn-posix.c:574:1: enter_function: entry to '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:614:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:616:6: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:627:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:654:13: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:655:6: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:661:3: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:664:6: branch_true: following 'true' branch... libgpg-error-1.61/src/spawn-posix.c:666:12: branch_true: ...to here libgpg-error-1.61/src/spawn-posix.c:667:10: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:673:19: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:674:19: acquire_resource: opened here libgpg-error-1.61/src/spawn-posix.c:727:12: call_function: calling 'do_create_pipe' from '_gpgrt_process_spawn' libgpg-error-1.61/src/spawn-posix.c:727:12: return_function: returning to '_gpgrt_process_spawn' from 'do_create_pipe' libgpg-error-1.61/src/spawn-posix.c:732:14: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:734:15: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:734:14: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:736:15: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:736:14: branch_false: following 'false' branch... libgpg-error-1.61/src/spawn-posix.c:738:11: branch_false: ...to here libgpg-error-1.61/src/spawn-posix.c:615:12: danger: 'fd_out[1]' leaks here; was opened at [(12)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/11) # 613| argv = xtrycalloc (i+2, sizeof *argv); # 614| if (!argv) # 615|-> return _gpg_err_code_from_syserror (); # 616| if (pgmname) # 617| argv[0] = strrchr (pgmname, '/');
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-219.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | libgpg-error-1.61-2.fc45 |
| store-results-to | /tmp/tmp2582ylqp/libgpg-error-1.61-2.fc45.tar.xz |
| time-created | 2026-08-03 17:20:37 |
| time-finished | 2026-08-03 17:22:19 |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp2582ylqp/libgpg-error-1.61-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp2582ylqp/libgpg-error-1.61-2.fc45.src.rpm' |
| tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |