Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
libsolv-0.7.39/src/chksum_openssl.c:30:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libsolv-0.7.39/src/chksum_openssl.c:26:1: enter_function: entry to ‘solv_chksum_impl’
libsolv-0.7.39/src/chksum_openssl.c:28:6: branch_true: following ‘true’ branch (when ‘op == 2’)...
libsolv-0.7.39/src/chksum_openssl.c:29:21: branch_true: ...to here
libsolv-0.7.39/src/chksum_openssl.c:29:21: call_function: calling ‘solv_memdup’ from ‘solv_chksum_impl’
libsolv-0.7.39/src/chksum_openssl.c:29:21: return_function: returning to ‘solv_chksum_impl’ from ‘solv_memdup’
libsolv-0.7.39/src/chksum_openssl.c:30:10: danger: dereference of NULL ‘solv_memdup(chk, 96)’
#   28|     if (op == SOLV_CHKSUMP_IMPL_CLONE) {
#   29|       Chksum *clone = solv_memdup(chk, sizeof(*chk));
#   30|->     if (!(clone->context = EVP_MD_CTX_dup(chk->context))) {
#   31|         solv_free(clone);
#   32|         return 0;

Error: COMPILER_WARNING: [#def2]
libsolv-0.7.39/src/poollang.c: scope_hint: In function ‘pool_id2langid’
libsolv-0.7.39/src/poollang.c:63:18: warning[-Wformat-overflow=]: ‘%s’ directive writing up to 254 bytes into a region of size between 1 and 255
#   63 |   sprintf(p, "%s:%s", n, lang);
#      |                  ^~
/usr/include/bits/stdio2.h:30:10: note: ‘__sprintf_chk’ output between 2 and 510 bytes into a destination of size 256
#   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   31 |                                   __glibc_objsize (__s), __fmt,
#      |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   32 |                                   __va_arg_pack ());
#      |                                   ~~~~~~~~~~~~~~~~~
#   61|     else
#   62|       p = buf;
#   63|->   sprintf(p, "%s:%s", n, lang);
#   64|     id = pool_str2id(pool, p, create);
#   65|     if (p != buf)

Scan Properties