Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
modulemd-2.15.2/modulemd/modulemd-module-index.c:1522:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nested_error’
modulemd-2.15.2/modulemd/modulemd-module-index.c:1463:1: enter_function: entry to ‘modulemd_module_index_merge’
modulemd-2.15.2/modulemd/modulemd-module-index.c:1486:22: release_memory: ‘nested_error’ is NULL
modulemd-2.15.2/modulemd/modulemd-module-index.c:1496:10: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/modulemd-module-index.c:1498:7: branch_true: ...to here
modulemd-2.15.2/modulemd/modulemd-module-index.c:1519:16: call_function: calling ‘modulemd_module_index_add_module_stream’ from ‘modulemd_module_index_merge’
modulemd-2.15.2/modulemd/modulemd-module-index.c:1519:16: return_function: returning to ‘modulemd_module_index_merge’ from ‘modulemd_module_index_add_module_stream’
modulemd-2.15.2/modulemd/modulemd-module-index.c:1519:14: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/modulemd-module-index.c:1522:15: branch_true: ...to here
modulemd-2.15.2/modulemd/modulemd-module-index.c:1522:15: release_memory: ‘nested_error’ is NULL
modulemd-2.15.2/modulemd/modulemd-module-index.c:1522:15: danger: dereference of NULL ‘nested_error’
# 1520|                   into, stream, &nested_error))
# 1521|               {
# 1522|->               g_info ("Could not add stream %s due to %s",
# 1523|                         nsvca,
# 1524|                         nested_error->message);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
modulemd-2.15.2/modulemd/modulemd-translation.c:617:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nested_error’
modulemd-2.15.2/modulemd/modulemd-translation.c:484:22: release_memory: ‘nested_error’ is NULL
modulemd-2.15.2/modulemd/modulemd-translation.c:490:6: branch_false: following ‘false’ branch...
modulemd-2.15.2/modulemd/modulemd-translation.c:496:3: branch_false: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:502:3: branch_false: following ‘false’ branch...
modulemd-2.15.2/modulemd/modulemd-translation.c:502:3: branch_false: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:503:6: branch_false: following ‘false’ branch...
modulemd-2.15.2/modulemd/modulemd-translation.c:503:6: branch_false: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:509:10: branch_true: following ‘true’ branch (when ‘done == 0’)...
modulemd-2.15.2/modulemd/modulemd-translation.c:511:7: branch_true: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:511:7: branch_false: following ‘false’ branch...
modulemd-2.15.2/modulemd/modulemd-translation.c:511:7: branch_false: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:615:6: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/modulemd-translation.c:617:7: branch_true: ...to here
modulemd-2.15.2/modulemd/modulemd-translation.c:617:7: release_memory: ‘nested_error’ is NULL
modulemd-2.15.2/modulemd/modulemd-translation.c:617:7: danger: dereference of NULL ‘nested_error’
#  615|     if (!modulemd_translation_validate (t, &nested_error))
#  616|       {
#  617|->       MMD_YAML_ERROR_EVENT_EXIT (error,
#  618|                                    event,
#  619|                                    "Unable to validate translation object: %s",

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
modulemd-2.15.2/modulemd/modulemd-util.c:383:15: warning[-Wanalyzer-null-argument]: use of NULL ‘nevra’ where non-null expected
modulemd-2.15.2/modulemd/modulemd-util.c:380:1: enter_function: entry to ‘modulemd_validate_nevra’
modulemd-2.15.2/modulemd/modulemd-util.c:382:21: release_memory: ‘nevra’ is NULL
modulemd-2.15.2/modulemd/modulemd-util.c:383:15: danger: argument 1 (‘nevra’) NULL where non-null expected
#  381|   {
#  382|     g_autofree gchar *tmp = g_strdup (nevra);
#  383|->   gsize len = strlen (nevra);
#  384|     gchar *i;
#  385|     gchar *endptr;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def4]
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:136:12: warning[-Wanalyzer-null-argument]: use of NULL ‘fopen(g_strdup_printf("%s/compression/%s", g_getenv("TEST_DATA_PATH"), expected_magic[j].filename), "rbe")’ where non-null expected
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:94:22: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:96:18: branch_true: ...to here
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:108:7: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:128:22: branch_true: following ‘true’ branch...
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:130:18: branch_true: ...to here
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:134:20: acquire_memory: allocated here
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:135:7: release_memory: assuming ‘fopen(g_strdup_printf("%s/compression/%s", g_getenv("TEST_DATA_PATH"), expected_magic[j].filename), "rbe")’ is NULL
modulemd-2.15.2/modulemd/tests/test-modulemd-compression.c:136:12: danger: argument 1 (‘fopen(g_strdup_printf("%s/compression/%s", g_getenv("TEST_DATA_PATH"), expected_magic[j].filename), "rbe")’) NULL where non-null expected
#  134|         filestream = g_fopen (filename, "rbe");
#  135|         g_assert_nonnull (filestream);
#  136|->       fd = fileno (filestream);
#  137|         result = modulemd_detect_compression (filename, fd, &error);
#  138|         g_assert_no_error (error);

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-227.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibmodulemd-2.15.3-3.fc45
diffbase-store-results-to/tmp/tmptn1xs7t4/libmodulemd-2.15.3-3.fc45.tar.xz
diffbase-time-created2026-08-03 17:33:16
diffbase-time-finished2026-08-03 17:35:25
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmptn1xs7t4/libmodulemd-2.15.3-3.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmptn1xs7t4/libmodulemd-2.15.3-3.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-227.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibmodulemd-2.15.2-7.fc44
store-results-to/tmp/tmpjo8hno30/libmodulemd-2.15.2-7.fc44.tar.xz
time-created2026-08-03 17:29:51
time-finished2026-08-03 17:32:55
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpjo8hno30/libmodulemd-2.15.2-7.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpjo8hno30/libmodulemd-2.15.2-7.fc44.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9