Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'msg' where non-null expected
libisoburn-1.5.8/libisoburn/isofs_wrap.c:175:7: acquire_memory: this call could return NULL
libisoburn-1.5.8/libisoburn/isofs_wrap.c:179:5: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:5: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:4: branch_true: following 'true' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: branch_true: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:182:4: danger: argument 1 ('msg') from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#  180|      {ret= -2; goto ex;}
#  181|    if(off_t_num > 0xffffffff) {
#  182|->    sprintf(msg, "Start address is outside 32 bit range.");
#  183|      isoburn_msgs_submit(o, 0x00060000, msg, 0, "FAILURE", 0);
#  184|      {ret= 0; goto ex;}

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
libisoburn-1.5.8/libisoburn/isofs_wrap.c:191:4: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'msg' where non-null expected
libisoburn-1.5.8/libisoburn/isofs_wrap.c:175:7: acquire_memory: this call could return NULL
libisoburn-1.5.8/libisoburn/isofs_wrap.c:179:5: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:5: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:181:4: branch_false: following 'false' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:186:2: branch_false: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:190:5: branch_true: following 'true' branch...
libisoburn-1.5.8/libisoburn/isofs_wrap.c:190:5: branch_true: ...to here
libisoburn-1.5.8/libisoburn/isofs_wrap.c:191:4: danger: argument 1 ('msg') from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#  189|    ret = isoburn_read_iso_head_v2(d, off_t_num, &dummy, NULL, 0);
#  190|    if (ret <= 0) {
#  191|->    sprintf(msg, "No ISO 9660 image at LBA %lu.",
#  192|                   (unsigned long int) ms_block);
#  193|      isoburn_msgs_submit(o, 0x00060000, msg, 0, "WARNING", 0);

Error: CPPCHECK_WARNING (CWE-476): [#def3]
libisoburn-1.5.8/xorriso/findjob.c:1114: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: (uint64_t*)t->arg1
# 1112|    t->test_type= test_type;
# 1113|    t->arg1= calloc(1, sizeof(uint64_t));
# 1114|->  *((uint64_t *) t->arg1)= value;
# 1115|    return(1);
# 1116|   }

Error: CPPCHECK_WARNING (CWE-457): [#def4]
libisoburn-1.5.8/xorriso/misc_funct.c:854: warning[uninitvar]: Uninitialized variable: timetext
#  852|              months[tms.tm_mon], tms.tm_mday, 1900+tms.tm_year);
#  853|    }
#  854|->  return(timetext);
#  855|   }
#  856|   

Error: CPPCHECK_WARNING (CWE-786): [#def5]
libisoburn-1.5.8/xorriso/opts_a_c.c:364: error[negativeIndex]: Array 'xorriso->appended_partitions[8]' accessed at index -1, which is out of bounds.
#  362|      for(i= 0; i < Xorriso_max_appended_partitionS; i++) {
#  363|        /* For now only pseudo-type 'revoke' works for all partitions */
#  364|->      if(xorriso->appended_partitions[i - 1] != NULL) {
#  365|          if(xorriso->appended_partitions[i - 1][0] != 0)
#  366|            set_changed= 1;

Error: GCC_ANALYZER_WARNING (CWE-122): [#def6]
libisoburn-1.5.8/xorriso/opts_i_o.c:209:8: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
libisoburn-1.5.8/xorriso/opts_i_o.c:159:8: branch_true: following 'true' branch (when 'npt' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:160:9: branch_true: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:161:6: branch_false: following 'false' branch (when 'npt' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:164:9: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:165:6: branch_false: following 'false' branch (when 'l != 0')...
libisoburn-1.5.8/xorriso/opts_i_o.c:167:6: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:203:13: branch_true: following 'true' branch...
libisoburn-1.5.8/xorriso/opts_i_o.c:204:8: branch_false: following 'false' branch (when 'l != 13')...
libisoburn-1.5.8/xorriso/opts_i_o.c:207:8: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:207:8: branch_false: following 'false' branch (when 'mask' is non-NULL)...
libisoburn-1.5.8/xorriso/opts_i_o.c:208:32: branch_false: ...to here
libisoburn-1.5.8/xorriso/opts_i_o.c:209:8: danger: out-of-bounds write
#  207|          Xorriso_alloc_meM(mask, char, l - 13 + 1);
#  208|          strncpy(mask, cpt + 13, l - 13);
#  209|->        mask[l - 13]= 0;
#  210|          ret= Xorriso_decode_lfa_flags(xorriso, mask, &mask_flags, 0);
#  211|          if(ret > 0) {

Scan Properties