Task #131643 - added.err
back to task #131643download
Error: GCC_ANALYZER_WARNING (CWE-688):
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'msg' where non-null expected
libisoburn-1.5.8/libisoburn/isofs_wrap.c:175:7: acquire_memory: this call could return NULL
libisoburn-1.5.8/libisoburn/isofs_wrap.c:179:5: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:5: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:4: branch_true: following 'true' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: branch_true: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: danger: argument 1 ('msg') from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
# 180| {ret= -2; goto ex;}
# 181| if(off_t_num > 0xffffffff) {
# 182|-> sprintf(msg, "Start address is outside 32 bit range.");
# 183| isoburn_msgs_submit(o, 0x00060000, msg, 0, "FAILURE", 0);
# 184| {ret= 0; goto ex;}
Error: GCC_ANALYZER_WARNING (CWE-688):
libisoburn-1.5.8/libisoburn/isofs_wrap.c:191:4: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'msg' where non-null expected
libisoburn-1.5.8/libisoburn/isofs_wrap.c:175:7: acquire_memory: this call could return NULL
libisoburn-1.5.8/libisoburn/isofs_wrap.c:179:5: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:5: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:4: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:186:2: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:190:5: branch_true: following 'true' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:190:5: branch_true: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:191:4: danger: argument 1 ('msg') from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
# 189| ret = isoburn_read_iso_head_v2(d, off_t_num, &dummy, NULL, 0);
# 190| if (ret <= 0) {
# 191|-> sprintf(msg, "No ISO 9660 image at LBA %lu.",
# 192| (unsigned long int) ms_block);
# 193| isoburn_msgs_submit(o, 0x00060000, msg, 0, "WARNING", 0);
Error: CPPCHECK_WARNING (CWE-476):
libisoburn-1.5.8/xorriso/findjob.c:1114: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: (uint64_t*)t->arg1
# 1112| t->test_type= test_type;
# 1113| t->arg1= calloc(1, sizeof(uint64_t));
# 1114|-> *((uint64_t *) t->arg1)= value;
# 1115| return(1);
# 1116| }
Error: CPPCHECK_WARNING (CWE-457):
libisoburn-1.5.8/xorriso/misc_funct.c:854: warning[uninitvar]: Uninitialized variable: timetext
# 852| months[tms.tm_mon], tms.tm_mday, 1900+tms.tm_year);
# 853| }
# 854|-> return(timetext);
# 855| }
# 856|
Error: CPPCHECK_WARNING (CWE-786):
libisoburn-1.5.8/xorriso/opts_a_c.c:364: error[negativeIndex]: Array 'xorriso->appended_partitions[8]' accessed at index -1, which is out of bounds.
# 362| for(i= 0; i < Xorriso_max_appended_partitionS; i++) {
# 363| /* For now only pseudo-type 'revoke' works for all partitions */
# 364|-> if(xorriso->appended_partitions[i - 1] != NULL) {
# 365| if(xorriso->appended_partitions[i - 1][0] != 0)
# 366| set_changed= 1;
Error: GCC_ANALYZER_WARNING (CWE-122):
libisoburn-1.5.8/xorriso/opts_i_o.c:209:8: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
libisoburn-1.5.8/xorriso/opts_i_o.c:159:8: branch_true: following 'true' branch (when 'npt' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:160:9: branch_true: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:161:6: branch_false: following 'false' branch (when 'npt' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:164:9: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:165:6: branch_false: following 'false' branch (when 'l != 0')...
libisoburn-1.5.8/xorriso/opts_i_o.c:167:6: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:203:13: branch_true: following 'true' branch...
libisoburn-1.5.8/xorriso/opts_i_o.c:204:8: branch_false: following 'false' branch (when 'l != 13')...
libisoburn-1.5.8/xorriso/opts_i_o.c:207:8: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:207:8: branch_false: following 'false' branch (when 'mask' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:208:32: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:209:8: danger: out-of-bounds write
# 207| Xorriso_alloc_meM(mask, char, l - 13 + 1);
# 208| strncpy(mask, cpt + 13, l - 13);
# 209|-> mask[l - 13]= 0;
# 210| ret= Xorriso_decode_lfa_flags(xorriso, mask, &mask_flags, 0);
# 211| if(ret > 0) {