Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libisoburn-1.5.6/libisoburn/isofs_wrap.c:162:4: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'msg' where non-null expected
libisoburn-1.5.6/libisoburn/isofs_wrap.c:151:7: acquire_memory: this call could return NULL
libisoburn-1.5.6/libisoburn/isofs_wrap.c:155:5: branch_false: following 'false' branch...
libisoburn-1.5.6/libisoburn/isofs_wrap.c:157:2: branch_false: ...to here
libisoburn-1.5.6/libisoburn/isofs_wrap.c:161:5: branch_true: following 'true' branch...
libisoburn-1.5.6/libisoburn/isofs_wrap.c:162:4: branch_true: ...to here
libisoburn-1.5.6/libisoburn/isofs_wrap.c:162:4: danger: argument 1 ('msg') from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#  160|    ret = isoburn_read_iso_head(d, int_num, &dummy, NULL, 0);
#  161|    if (ret <= 0) {
#  162|->    sprintf(msg, "No ISO 9660 image at LBA %d.", int_num);
#  163|      isoburn_msgs_submit(o, 0x00060000, msg, 0, "WARNING", 0);
#  164|      {ret= 2; goto ex;}

Error: COMPILER_WARNING: [#def2]
libisoburn-1.5.6/xorriso/filters.c: scope_hint: In function 'Xorriso_extf_new'
libisoburn-1.5.6/xorriso/filters.c:63:28: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#   63 |  *filter= o= calloc(sizeof(struct Xorriso_extF), 1);
#      |                            ^~~~~~
libisoburn-1.5.6/xorriso/filters.c:63:28: note: earlier argument should specify number of elements, later size of each element
#   61|    IsoExternalFilterCommand *cmd;
#   62|   
#   63|->  *filter= o= calloc(sizeof(struct Xorriso_extF), 1);
#   64|    if(o == NULL)
#   65|      goto failure;

Error: COMPILER_WARNING: [#def3]
libisoburn-1.5.6/xorriso/filters.c:68:29: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#   68 |  o->cmd= cmd= calloc(sizeof(IsoExternalFilterCommand), 1);
#      |                             ^~~~~~~~~~~~~~~~~~~~~~~~
libisoburn-1.5.6/xorriso/filters.c:68:29: note: earlier argument should specify number of elements, later size of each element
#   66|    o->flag= flag;
#   67|    o->cmd= NULL;
#   68|->  o->cmd= cmd= calloc(sizeof(IsoExternalFilterCommand), 1);
#   69|    if(cmd == NULL)
#   70|      goto failure;

Error: COMPILER_WARNING: [#def4]
libisoburn-1.5.6/xorriso/filters.c:86:27: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#   86 |  cmd->argv= calloc(sizeof(char *), argc + 2);
#      |                           ^~~~
libisoburn-1.5.6/xorriso/filters.c:86:27: note: earlier argument should specify number of elements, later size of each element
#   84|    if(cmd->path == NULL)
#   85|      goto failure;
#   86|->  cmd->argv= calloc(sizeof(char *), argc + 2);
#   87|    if(cmd->argv == NULL)
#   88|      goto failure;

Error: COMPILER_WARNING: [#def5]
libisoburn-1.5.6/xorriso/findjob.c: scope_hint: In function 'Findjob_set_num_filter'
libisoburn-1.5.6/xorriso/findjob.c:888:25: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  888 |  t->arg1= calloc(sizeof(int), 1);
#      |                         ^~~
libisoburn-1.5.6/xorriso/findjob.c:888:25: note: earlier argument should specify number of elements, later size of each element
#  886|    t= o->cursor->test;
#  887|    t->test_type= test_type;
#  888|->  t->arg1= calloc(sizeof(int), 1);
#  889|    t->arg2= calloc(sizeof(int), 1);
#  890|    if(t->arg1 == NULL || t->arg2 == NULL)

Error: COMPILER_WARNING: [#def6]
libisoburn-1.5.6/xorriso/findjob.c:889:25: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  889 |  t->arg2= calloc(sizeof(int), 1);
#      |                         ^~~
libisoburn-1.5.6/xorriso/findjob.c:889:25: note: earlier argument should specify number of elements, later size of each element
#  887|    t->test_type= test_type;
#  888|    t->arg1= calloc(sizeof(int), 1);
#  889|->  t->arg2= calloc(sizeof(int), 1);
#  890|    if(t->arg1 == NULL || t->arg2 == NULL)
#  891|      return(-1);

Error: COMPILER_WARNING: [#def7]
libisoburn-1.5.6/xorriso/findjob.c: scope_hint: In function 'Findjob_set_size_filter'
libisoburn-1.5.6/xorriso/findjob.c:910:25: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  910 |  t->arg1= calloc(sizeof(off_t), 1);
#      |                         ^~~~~
libisoburn-1.5.6/xorriso/findjob.c:910:25: note: earlier argument should specify number of elements, later size of each element
#  908|    t= o->cursor->test;
#  909|    t->test_type= test_type;
#  910|->  t->arg1= calloc(sizeof(off_t), 1);
#  911|    t->arg2= calloc(sizeof(int), 1);
#  912|    if(t->arg1 == NULL || t->arg2 == NULL)

Error: COMPILER_WARNING: [#def8]
libisoburn-1.5.6/xorriso/findjob.c:911:25: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  911 |  t->arg2= calloc(sizeof(int), 1);
#      |                         ^~~
libisoburn-1.5.6/xorriso/findjob.c:911:25: note: earlier argument should specify number of elements, later size of each element
#  909|    t->test_type= test_type;
#  910|    t->arg1= calloc(sizeof(off_t), 1);
#  911|->  t->arg2= calloc(sizeof(int), 1);
#  912|    if(t->arg1 == NULL || t->arg2 == NULL)
#  913|      return(-1);

Error: COMPILER_WARNING: [#def9]
libisoburn-1.5.6/xorriso/findjob.c: scope_hint: In function 'Findjob_set_test_hidden'
libisoburn-1.5.6/xorriso/findjob.c:945:25: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  945 |  t->arg1= calloc(sizeof(int), 1);
#      |                         ^~~
libisoburn-1.5.6/xorriso/findjob.c:945:25: note: earlier argument should specify number of elements, later size of each element
#  943|    t= o->cursor->test;
#  944|    t->test_type= 17;
#  945|->  t->arg1= calloc(sizeof(int), 1);
#  946|    if(t->arg1 == NULL)
#  947|      return(-1);

Error: COMPILER_WARNING: [#def10]
libisoburn-1.5.6/xorriso/opts_a_c.c: scope_hint: In function 'Xorriso_option_abort_on'
libisoburn-1.5.6/xorriso/opts_a_c.c:56:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#   56 |  if(Sfile_str(xorriso->abort_on_text, official, 0) <= 0)
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
libisoburn-1.5.6/xorriso/opts_a_c.c:56:5: note: referencing argument 1 of type 'char[4096]'
libisoburn-1.5.6/xorriso/xorriso_private.h:56: included_from: Included from here.
libisoburn-1.5.6/xorriso/opts_a_c.c:34: included_from: Included from here.
libisoburn-1.5.6/xorriso/sfile.h:36:5: note: in a call to function 'Sfile_str'
#   36 | int Sfile_str(char target[SfileadrL], char *source, int flag);
#      |     ^~~~~~~~~
#   54|    if(ret <= 0)
#   55|      official= severity;
#   56|->  if(Sfile_str(xorriso->abort_on_text, official, 0) <= 0)
#   57|      return(-1);
#   58|    xorriso->abort_on_severity= sev;

Error: COMPILER_WARNING: [#def11]
libisoburn-1.5.6/xorriso/opts_a_c.c:56:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#   54|    if(ret <= 0)
#   55|      official= severity;
#   56|->  if(Sfile_str(xorriso->abort_on_text, official, 0) <= 0)
#   57|      return(-1);
#   58|    xorriso->abort_on_severity= sev;

Error: COMPILER_WARNING: [#def12]
libisoburn-1.5.6/xorriso/opts_d_h.c: scope_hint: In function 'Xorriso_option_help'
libisoburn-1.5.6/xorriso/opts_d_h.c:2630:34: warning[-Wformat-overflow=]: '%s' directive writing up to 60159 bytes into a region of size 40960
# 2630 |    sprintf(xorriso->result_line,"%s\n",tpt);
#      |                                  ^~
/usr/include/bits/stdio2.h:30:10: note: '__sprintf_chk' output between 2 and 60161 bytes into a destination of size 40960
#   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   31 |                                   __glibc_objsize (__s), __fmt,
#      |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   32 |                                   __va_arg_pack ());
#      |                                   ~~~~~~~~~~~~~~~~~
# 2628|      if(strcmp(tpt,"@ENDE_OF_HELPTEXT_(HOPEFULLY_UNIQUELY_SILLY_TEXT)@")==0)
# 2629|    break;
# 2630|->    sprintf(xorriso->result_line,"%s\n",tpt);
# 2631|      Xorriso_result(xorriso,0);
# 2632|      if(xorriso->request_to_abort)

Error: COMPILER_WARNING: [#def13]
libisoburn-1.5.6/xorriso/opts_p_z.c: scope_hint: In function 'Xorriso_option_report_about'
libisoburn-1.5.6/xorriso/opts_p_z.c:528:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#  528 |  if(Sfile_str(xorriso->report_about_text, official, 0) <= 0)
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
libisoburn-1.5.6/xorriso/opts_p_z.c:528:5: note: referencing argument 1 of type 'char[4096]'
libisoburn-1.5.6/xorriso/xorriso_private.h:56: included_from: Included from here.
libisoburn-1.5.6/xorriso/opts_p_z.c:29: included_from: Included from here.
libisoburn-1.5.6/xorriso/sfile.h:36:5: note: in a call to function 'Sfile_str'
#   36 | int Sfile_str(char target[SfileadrL], char *source, int flag);
#      |     ^~~~~~~~~
#  526|    if(ret <= 0)
#  527|      official= severity;
#  528|->  if(Sfile_str(xorriso->report_about_text, official, 0) <= 0)
#  529|      return(-1);
#  530|    xorriso->report_about_severity= sev;

Error: COMPILER_WARNING: [#def14]
libisoburn-1.5.6/xorriso/opts_p_z.c:528:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#  526|    if(ret <= 0)
#  527|      official= severity;
#  528|->  if(Sfile_str(xorriso->report_about_text, official, 0) <= 0)
#  529|      return(-1);
#  530|    xorriso->report_about_severity= sev;

Error: COMPILER_WARNING: [#def15]
libisoburn-1.5.6/xorriso/opts_p_z.c: scope_hint: In function 'Xorriso_option_return_with'
libisoburn-1.5.6/xorriso/opts_p_z.c:582:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#  582 |  if(Sfile_str(xorriso->return_with_text, official, 0) <= 0)
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
libisoburn-1.5.6/xorriso/opts_p_z.c:582:5: note: referencing argument 1 of type 'char[4096]'
libisoburn-1.5.6/xorriso/sfile.h:36:5: note: in a call to function 'Sfile_str'
#   36 | int Sfile_str(char target[SfileadrL], char *source, int flag);
#      |     ^~~~~~~~~
#  580|      return(0);
#  581|    }
#  582|->  if(Sfile_str(xorriso->return_with_text, official, 0) <= 0)
#  583|      return(-1);
#  584|    xorriso->return_with_severity= sev;

Error: COMPILER_WARNING: [#def16]
libisoburn-1.5.6/xorriso/opts_p_z.c:582:5: warning[-Wstringop-overflow=]: 'Sfile_str' accessing 4096 bytes in a region of size 20
#  580|      return(0);
#  581|    }
#  582|->  if(Sfile_str(xorriso->return_with_text, official, 0) <= 0)
#  583|      return(-1);
#  584|    xorriso->return_with_severity= sev;

Error: COMPILER_WARNING: [#def17]
libisoburn-1.5.6/xorriso/sort_cmp.c: scope_hint: In function 'Xorriso_sorted_node_array'
libisoburn-1.5.6/xorriso/sort_cmp.c:353:29: warning[-Wcalloc-transposed-args]: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument
#  353 |  *node_array= calloc(sizeof(IsoNode *), (*nodec)+1);
#      |                             ^~~~~~~
libisoburn-1.5.6/xorriso/sort_cmp.c:353:29: note: earlier argument should specify number of elements, later size of each element
#  351|      return(ret);
#  352|   
#  353|->  *node_array= calloc(sizeof(IsoNode *), (*nodec)+1);
#  354|    if(*node_array==NULL) {
#  355|      sprintf(xorriso->info_text,

Error: COMPILER_WARNING: [#def18]
libisoburn-1.5.6/xorriso/write_run.c: scope_hint: In function 'Xorriso_make_iso_write_opts'
libisoburn-1.5.6/xorriso/write_run.c:943:2: warning[-Wstringop-overflow=]: 'Ftimetxt' accessing 40 bytes in a region of size 19
#  943 |  Ftimetxt(time(NULL), xorriso->scdbackup_tag_time, 8);
#      |  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
libisoburn-1.5.6/xorriso/write_run.c:943:2: note: referencing argument 2 of type 'char[40]'
libisoburn-1.5.6/xorriso/xorriso_private.h:57: included_from: Included from here.
libisoburn-1.5.6/xorriso/write_run.c:58: included_from: Included from here.
libisoburn-1.5.6/xorriso/misc_funct.h:37:7: note: in a call to function 'Ftimetxt'
#   37 | char *Ftimetxt(time_t t, char timetext[40], int flag);
#      |       ^~~~~~~~
#  941|    isoburn_igopt_set_out_charset(sopts, out_cs);
#  942|    isoburn_igopt_set_fifo_size(sopts, xorriso->fs * 2048);
#  943|->  Ftimetxt(time(NULL), xorriso->scdbackup_tag_time, 8);
#  944|    isoburn_igopt_set_scdbackup_tag(sopts, xorriso->scdbackup_tag_name,
#  945|                                    xorriso->scdbackup_tag_time,

Error: COMPILER_WARNING: [#def19]
libisoburn-1.5.6/xorriso/write_run.c:943:2: warning[-Wstringop-overflow=]: 'Ftimetxt' accessing 40 bytes in a region of size 19
#  941|    isoburn_igopt_set_out_charset(sopts, out_cs);
#  942|    isoburn_igopt_set_fifo_size(sopts, xorriso->fs * 2048);
#  943|->  Ftimetxt(time(NULL), xorriso->scdbackup_tag_time, 8);
#  944|    isoburn_igopt_set_scdbackup_tag(sopts, xorriso->scdbackup_tag_name,
#  945|                                    xorriso->scdbackup_tag_time,

Error: GCC_ANALYZER_WARNING (CWE-457): [#def20]
libisoburn-1.5.6/xorriso/write_run.c:3147:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'field_end'
libisoburn-1.5.6/xorriso/write_run.c:3119:5: enter_function: entry to 'Xorriso_refresh_sb_tag'
libisoburn-1.5.6/xorriso/write_run.c:3128:4: branch_false: following 'false' branch...
libisoburn-1.5.6/xorriso/write_run.c:3134:7: branch_false: ...to here
libisoburn-1.5.6/xorriso/write_run.c:3135:4: branch_false: following 'false' branch...
libisoburn-1.5.6/xorriso/write_run.c:3140:47: branch_false: ...to here
libisoburn-1.5.6/xorriso/write_run.c:3140:2: call_function: calling 'Xorriso__set_iso_check_tag_md5' from 'Xorriso_refresh_sb_tag'
libisoburn-1.5.6/xorriso/write_run.c:3140:2: return_function: returning to 'Xorriso_refresh_sb_tag' from 'Xorriso__set_iso_check_tag_md5'
libisoburn-1.5.6/xorriso/write_run.c:3145:4: branch_false: following 'false' branch...
libisoburn-1.5.6/xorriso/write_run.c:3147:7: branch_false: ...to here
libisoburn-1.5.6/xorriso/write_run.c:3147:7: danger: use of uninitialized value 'field_end' here
# 3145|    if(ret <= 0)
# 3146|      goto no_md5_ctx;
# 3147|->  ret= iso_md5_compute(ctx, head_buffer + checksum_block * 2048,
# 3148|                         field_end);
# 3149|    if(ret <= 0)

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-54.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibisoburn-1.5.8-3.fc45
diffbase-store-results-to/tmp/tmphtslx3m4/libisoburn-1.5.8-3.fc45.tar.xz
diffbase-time-created2026-08-03 17:23:15
diffbase-time-finished2026-08-03 17:25:14
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmphtslx3m4/libisoburn-1.5.8-3.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmphtslx3m4/libisoburn-1.5.8-3.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-54.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibisoburn-1.5.6-9.fc44
store-results-to/tmp/tmpcry_mjx7/libisoburn-1.5.6-9.fc44.tar.xz
time-created2026-08-03 17:20:10
time-finished2026-08-03 17:22:56
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpcry_mjx7/libisoburn-1.5.6-9.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpcry_mjx7/libisoburn-1.5.6-9.fc44.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9