Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:119: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  117|           {
#  118|               scan_line[j * 3] = 255;
#  119|->             scan_line[(j * 3) + 1] = (unsigned char)(255 - i);
#  120|               scan_line[(j * 3) + 2] = (unsigned char)(255 - i);
#  121|           }

Error: CPPCHECK_WARNING (CWE-476): [#def2]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:120: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  118|               scan_line[j * 3] = 255;
#  119|               scan_line[(j * 3) + 1] = (unsigned char)(255 - i);
#  120|->             scan_line[(j * 3) + 2] = (unsigned char)(255 - i);
#  121|           }
#  122|           for (j = 75; j < 150; j++)

Error: CPPCHECK_WARNING (CWE-476): [#def3]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:124: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  122|           for (j = 75; j < 150; j++)
#  123|           {
#  124|->             scan_line[j * 3] = (unsigned char)(255 - i);
#  125|               scan_line[(j * 3) + 1] = 255;
#  126|               scan_line[(j * 3) + 2] = (unsigned char)(255 - i);

Error: CPPCHECK_WARNING (CWE-476): [#def4]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:126: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  124|               scan_line[j * 3] = (unsigned char)(255 - i);
#  125|               scan_line[(j * 3) + 1] = 255;
#  126|->             scan_line[(j * 3) + 2] = (unsigned char)(255 - i);
#  127|           }
#  128|           for (j = 150; j < 225; j++)

Error: CPPCHECK_WARNING (CWE-476): [#def5]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:130: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  128|           for (j = 150; j < 225; j++)
#  129|           {
#  130|->             scan_line[j * 3] = (unsigned char)(255 - i);
#  131|               scan_line[(j * 3) + 1] = (unsigned char)(255 - i);
#  132|               scan_line[(j * 3) + 2] = 255;

Error: CPPCHECK_WARNING (CWE-476): [#def6]
tiff-4.7.2/contrib/dbs/tiff-rgb.c:131: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scan_line
#  129|           {
#  130|               scan_line[j * 3] = (unsigned char)(255 - i);
#  131|->             scan_line[(j * 3) + 1] = (unsigned char)(255 - i);
#  132|               scan_line[(j * 3) + 2] = 255;
#  133|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
tiff-4.7.2/contrib/iptcutil/iptcutil.c:352:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘q’
tiff-4.7.2/contrib/iptcutil/iptcutil.c:370:5: enter_function: entry to ‘main’
tiff-4.7.2/contrib/iptcutil/iptcutil.c:386:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
tiff-4.7.2/contrib/iptcutil/iptcutil.c:386:8: branch_false: ...to here
tiff-4.7.2/contrib/iptcutil/iptcutil.c:396:17: branch_true: following ‘true’ branch (when ‘i < argc’)...
tiff-4.7.2/contrib/iptcutil/iptcutil.c:398:17: branch_true: ...to here
tiff-4.7.2/contrib/iptcutil/iptcutil.c:399:12: branch_true: following ‘true’ branch...
tiff-4.7.2/contrib/iptcutil/iptcutil.c:401:13: branch_true: ...to here
tiff-4.7.2/contrib/iptcutil/iptcutil.c:452:8: branch_false: following ‘false’ branch (when ‘mode != 0’)...
tiff-4.7.2/contrib/iptcutil/iptcutil.c:463:13: branch_false: ...to here
tiff-4.7.2/contrib/iptcutil/iptcutil.c:465:24: acquire_memory: this call could return NULL
tiff-4.7.2/contrib/iptcutil/iptcutil.c:466:24: call_function: calling ‘super_fgets’ from ‘main’
#  350|               q = b + tlen;
#  351|           }
#  352|->         *q = (char)c;
#  353|       }
#  354|       *blen = 0;

Error: GCC_ANALYZER_WARNING (CWE-835): [#def8]
tiff-4.7.2/libtiff/tif_ojpeg.c:2435:9: warning[-Wanalyzer-infinite-loop]: infinite loop
tiff-4.7.2/libtiff/tif_ojpeg.c:2435:9: danger: infinite loop here
tiff-4.7.2/libtiff/tif_ojpeg.c:2435:9: branch_true: if it ever follows 'true' branch, it will always do so...
tiff-4.7.2/libtiff/tif_ojpeg.c:2436:9: branch_true: ...to here
tiff-4.7.2/libtiff/tif_ojpeg.c:2499:14: branch_true: if it ever follows 'true' branch, it will always do so...
tiff-4.7.2/libtiff/tif_ojpeg.c:2499:14: branch_true: ...to here
# 2433|       do
# 2434|       {
# 2435|->         assert(sp->out_state <= ososEoi);
# 2436|           switch (sp->out_state)
# 2437|           {

Error: CPPCHECK_WARNING (CWE-401): [#def9]
tiff-4.7.2/tools/fax2ps.c:372: error[memleakOnRealloc]: Common realloc mistake: 'pages' nulled but not freed upon failure
#  370|                   pageNumber = (uint16_t)atoi(optarg);
#  371|                   if (pages)
#  372|->                     pages = (uint16_t *)realloc(pages, (size_t)(npages + 1) *
#  373|                                                              sizeof(uint16_t));
#  374|                   else

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-5.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibtiff-4.7.1-2.fc44
diffbase-store-results-to/tmp/tmpnge8_wg1/libtiff-4.7.1-2.fc44.tar.xz
diffbase-time-created2026-08-03 17:59:24
diffbase-time-finished2026-08-03 18:02:22
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpnge8_wg1/libtiff-4.7.1-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpnge8_wg1/libtiff-4.7.1-2.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-5.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibtiff-4.7.2-2.fc45
store-results-to/tmp/tmpyhv8e3ri/libtiff-4.7.2-2.fc45.tar.xz
time-created2026-08-03 18:02:31
time-finished2026-08-03 18:04:43
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpyhv8e3ri/libtiff-4.7.2-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpyhv8e3ri/libtiff-4.7.2-2.fc45.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9