libwebp-1.6.0-4.fc45

List of Findings

Error: CPPCHECK_WARNING (CWE-457): [#def1]
libwebp-1.6.0/examples/cwebp.c:391: warning[uninitvar]: Uninitialized variable: buf
#  389|       val >>= 8;
#  390|     }
#  391|->   return (fwrite(buf, num, 1, out) == 1);
#  392|   }
#  393|   

Error: COMPILER_WARNING: [#def2]
libwebp-1.6.0/examples/webpinfo.c: scope_hint: In function ‘main’
libwebp-1.6.0/examples/webpinfo.c:940:70: warning[-Wformat-truncation=]: ‘%6d’ directive output may be truncated writing between 6 and 11 bytes into a region of size between 6 and 11
#  940 |     snprintf(error_message, 50, "Unknown chunk at offset %6d, length %6d",
#      |                                                                      ^~~
libwebp-1.6.0/examples/webpinfo.c:940:33: note: directive argument in the range [-2147483648, 2147483646]
#  940 |     snprintf(error_message, 50, "Unknown chunk at offset %6d, length %6d",
#      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/bits/stdio2.h:68:10: note: ‘__snprintf_chk’ output between 46 and 56 bytes into a destination of size 50
#   68 |   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69 |                                    __glibc_objsize (__s), __fmt,
#      |                                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   70 |                                    __va_arg_pack ());
#      |                                    ~~~~~~~~~~~~~~~~~
#  938|     if (chunk_data->id == CHUNK_UNKNOWN) {
#  939|       char error_message[50];
#  940|->     snprintf(error_message, 50, "Unknown chunk at offset %6d, length %6d",
#  941|               (int)chunk_data->offset, (int)chunk_data->size);
#  942|       LOG_WARN(error_message);

Error: CPPCHECK_WARNING (CWE-682): [#def3]
libwebp-1.6.0/extras/get_disto.c:170: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
#  168|     int max = 0;
#  169|     uint8_t* const plane1 = (uint8_t*)malloc(2 * w * h * sizeof(*plane1));
#  170|->   uint8_t* const plane2 = plane1 + w * h;
#  171|     if (plane1 == NULL) return -1;
#  172|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def4]
libwebp-1.6.0/imageio/image_enc.c:618:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fout’
libwebp-1.6.0/imageio/image_enc.c:587:5: enter_function: entry to ‘WebPSaveImage’
libwebp-1.6.0/imageio/image_enc.c:596:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:603:12: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:603:12: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:604:25: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:604:25: acquire_resource: opened here
libwebp-1.6.0/imageio/image_enc.c:605:8: branch_false: following ‘false’ branch (when ‘fout’ is non-NULL)...
libwebp-1.6.0/imageio/image_enc.c:612:7: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:618:11: call_function: calling ‘WebPWritePNG’ from ‘WebPSaveImage’
libwebp-1.6.0/imageio/image_enc.c:618:11: return_function: returning to ‘WebPSaveImage’ from ‘WebPWritePNG’
libwebp-1.6.0/imageio/image_enc.c:637:7: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:637:7: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:618:8: danger: ‘fout’ leaks here; was opened at [(6)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/5)
#  616|       ok &= WebPWritePNG(out_file_name, use_stdout, buffer);
#  617|   #else
#  618|->     ok &= WebPWritePNG(fout, buffer);
#  619|   #endif
#  620|     } else if (format == PAM) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
libwebp-1.6.0/imageio/image_enc.c:618:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fout’
libwebp-1.6.0/imageio/image_enc.c:587:5: enter_function: entry to ‘WebPSaveImage’
libwebp-1.6.0/imageio/image_enc.c:596:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:603:12: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:603:12: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:604:25: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:604:25: acquire_memory: allocated here
libwebp-1.6.0/imageio/image_enc.c:605:8: branch_false: following ‘false’ branch (when ‘fout’ is non-NULL)...
libwebp-1.6.0/imageio/image_enc.c:612:7: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:618:11: call_function: calling ‘WebPWritePNG’ from ‘WebPSaveImage’
libwebp-1.6.0/imageio/image_enc.c:618:11: return_function: returning to ‘WebPSaveImage’ from ‘WebPWritePNG’
libwebp-1.6.0/imageio/image_enc.c:637:7: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/image_enc.c:637:7: branch_false: ...to here
libwebp-1.6.0/imageio/image_enc.c:618:8: danger: ‘fout’ leaks here; was allocated at [(6)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/5)
#  616|       ok &= WebPWritePNG(out_file_name, use_stdout, buffer);
#  617|   #else
#  618|->     ok &= WebPWritePNG(fout, buffer);
#  619|   #endif
#  620|     } else if (format == PAM) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def6]
libwebp-1.6.0/imageio/imageio_util.c:141:3: warning[-Wanalyzer-file-leak]: leak of FILE ‘out’
libwebp-1.6.0/imageio/imageio_util.c:132:6: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libwebp-1.6.0/imageio/imageio_util.c:135:9: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:135:9: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/imageio_util.c:135:54: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:135:54: acquire_resource: opened here
libwebp-1.6.0/imageio/imageio_util.c:136:6: branch_false: following ‘false’ branch (when ‘out’ is non-NULL)...
libwebp-1.6.0/imageio/imageio_util.c:141:9: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:142:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/imageio_util.c:142:6: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:141:3: danger: ‘out’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  139|       return 0;
#  140|     }
#  141|->   ok = (fwrite(data, data_size, 1, out) == 1);
#  142|     if (out != stdout) fclose(out);
#  143|     return ok;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
libwebp-1.6.0/imageio/imageio_util.c:141:3: warning[-Wanalyzer-malloc-leak]: leak of ‘out’
libwebp-1.6.0/imageio/imageio_util.c:132:6: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libwebp-1.6.0/imageio/imageio_util.c:135:9: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:135:9: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/imageio_util.c:135:54: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:135:54: acquire_memory: allocated here
libwebp-1.6.0/imageio/imageio_util.c:136:6: branch_false: following ‘false’ branch (when ‘out’ is non-NULL)...
libwebp-1.6.0/imageio/imageio_util.c:141:9: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:142:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/imageio_util.c:142:6: branch_false: ...to here
libwebp-1.6.0/imageio/imageio_util.c:141:3: danger: ‘out’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  139|       return 0;
#  140|     }
#  141|->   ok = (fwrite(data, data_size, 1, out) == 1);
#  142|     if (out != stdout) fclose(out);
#  143|     return ok;

Error: CPPCHECK_WARNING (CWE-457): [#def8]
libwebp-1.6.0/imageio/jpegdec.c:288: error[uninitvar]: Uninitialized variable: dinfo
#  286|     ctx.data_size = data_size;
#  287|   
#  288|->   memset((j_decompress_ptr)&dinfo, 0, sizeof(dinfo));   // for setjmp safety
#  289|     dinfo.err = jpeg_std_error(&jerr.pub);
#  290|     jerr.pub.error_exit = my_error_exit;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
libwebp-1.6.0/imageio/jpegdec.c:322:3: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)height * (long unsigned int)stride)’
libwebp-1.6.0/imageio/jpegdec.c:281:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/jpegdec.c:292:7: setjmp: ‘setjmp’ called here
libwebp-1.6.0/imageio/jpegdec.c:292:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/jpegdec.c:299:3: branch_false: ...to here
libwebp-1.6.0/imageio/jpegdec.c:309:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/jpegdec.c:313:11: branch_false: ...to here
libwebp-1.6.0/imageio/jpegdec.c:317:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/jpegdec.c:318:8: branch_false: ...to here
libwebp-1.6.0/imageio/jpegdec.c:317:7: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/jpegdec.c:322:26: branch_false: ...to here
libwebp-1.6.0/imageio/jpegdec.c:322:19: acquire_memory: allocated here
libwebp-1.6.0/imageio/jpegdec.c:322:3: danger: ‘malloc((long unsigned int)height * (long unsigned int)stride)’ leaks here; was allocated at [(12)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/11)
#  320|     }
#  321|   
#  322|->   rgb = (uint8_t*)malloc((size_t)stride * height);
#  323|     if (rgb == NULL) {
#  324|       goto Error;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
libwebp-1.6.0/imageio/pngdec.c:345:3: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)stride * (long unsigned int)height)’
libwebp-1.6.0/imageio/pngdec.c:266:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:273:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:275:3: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:276:7: setjmp: ‘setjmp’ called here
libwebp-1.6.0/imageio/pngdec.c:276:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:286:19: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:292:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:293:14: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:294:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:296:3: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:298:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:302:3: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:336:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:339:12: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:340:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:341:8: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:340:7: branch_false: following ‘false’ branch...
libwebp-1.6.0/imageio/pngdec.c:345:19: branch_false: ...to here
libwebp-1.6.0/imageio/pngdec.c:345:19: acquire_memory: allocated here
libwebp-1.6.0/imageio/pngdec.c:345:3: danger: ‘malloc((long unsigned int)stride * (long unsigned int)height)’ leaks here; was allocated at [(20)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/19)
#  343|     }
#  344|   
#  345|->   rgb = (uint8_t*)malloc((size_t)stride * height);
#  346|     if (rgb == NULL) goto Error;
#  347|     for (p = 0; p < num_passes; ++p) {

Error: COMPILER_WARNING: [#def11] [important]
libwebp-1.6.0/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-lU8OL0/src.c:5:9: error[error]: unknown type name ‘this’

Error: COMPILER_WARNING: [#def12] [important]
libwebp-1.6.0/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-lU8OL0/src.c:5:17: error[error]: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘not’

Error: COMPILER_WARNING: [#def13] [important]
libwebp-1.6.0/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-xA5oFB/src.c:5:9: error[error]: unknown type name ‘this’

Error: COMPILER_WARNING: [#def14] [important]
libwebp-1.6.0/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-xA5oFB/src.c:5:17: error[error]: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘not’

Error: CPPCHECK_WARNING (CWE-369): [#def15]
libwebp-1.6.0/src/enc/analysis_enc.c:202: error[zerodiv]: Division by zero.
#  200|         }
#  201|       }
#  202|->     weighted_average = (weighted_average + total_weight / 2) / total_weight;
#  203|       if (displaced < 5) break;   // no need to keep on looping...
#  204|     }

Error: CPPCHECK_WARNING (CWE-457): [#def16]
libwebp-1.6.0/src/enc/frame_enc.c:703: warning[uninitvar]: Uninitialized variable: it->enc
#  701|   
#  702|   static int PostLoopFinalize(VP8EncIterator* const it, int ok) {
#  703|->   VP8Encoder* const enc = it->enc;
#  704|     if (ok) {      // Finalize the partitions, check for extra errors.
#  705|       int p;

Error: GCC_ANALYZER_WARNING (CWE-126): [#def17]
libwebp-1.6.0/src/enc/vp8l_enc.c:476:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
libwebp-1.6.0/src/enc/vp8l_enc.c:1512:12: enter_function: entry to ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1548:17: branch_true: following ‘true’ branch (when ‘idx < num_crunch_configs’)...
libwebp-1.6.0/src/enc/vp8l_enc.c:1549:43: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1560:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1561:7: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1572:25: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: call_function: calling ‘AllocateTransformBuffer’ from ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: return_function: returning to ‘EncodeStreamHook’ from ‘AllocateTransformBuffer’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:12: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:10: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1577:65: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:11: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1581:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1590:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1593:24: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1591:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1597:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1598:12: call_function: calling ‘EncodePalette’ from ‘EncodeStreamHook’
#  474|       lengths = (uint8_t*)&codes[total_length_size];
#  475|       for (i = 0; i < 5 * histogram_image_size; ++i) {
#  476|->       const int bit_length = huffman_codes[i].num_symbols;
#  477|         huffman_codes[i].codes = codes;
#  478|         huffman_codes[i].code_lengths = lengths;

Error: GCC_ANALYZER_WARNING (CWE-121): [#def18]
libwebp-1.6.0/src/enc/vp8l_enc.c:477:7: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
libwebp-1.6.0/src/enc/vp8l_enc.c:1512:12: enter_function: entry to ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1548:17: branch_true: following ‘true’ branch (when ‘idx < num_crunch_configs’)...
libwebp-1.6.0/src/enc/vp8l_enc.c:1549:43: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1560:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1561:7: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1572:25: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: call_function: calling ‘AllocateTransformBuffer’ from ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: return_function: returning to ‘EncodeStreamHook’ from ‘AllocateTransformBuffer’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:12: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:10: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1577:65: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:11: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1581:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1590:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1593:24: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1591:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1597:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1598:12: call_function: calling ‘EncodePalette’ from ‘EncodeStreamHook’
#  475|       for (i = 0; i < 5 * histogram_image_size; ++i) {
#  476|         const int bit_length = huffman_codes[i].num_symbols;
#  477|->       huffman_codes[i].codes = codes;
#  478|         huffman_codes[i].code_lengths = lengths;
#  479|         codes += bit_length;

Error: GCC_ANALYZER_WARNING (CWE-121): [#def19]
libwebp-1.6.0/src/enc/vp8l_enc.c:478:7: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
libwebp-1.6.0/src/enc/vp8l_enc.c:1512:12: enter_function: entry to ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1542:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1548:17: branch_true: following ‘true’ branch (when ‘idx < num_crunch_configs’)...
libwebp-1.6.0/src/enc/vp8l_enc.c:1549:43: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1560:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1561:7: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1572:25: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: call_function: calling ‘AllocateTransformBuffer’ from ‘EncodeStreamHook’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:12: return_function: returning to ‘EncodeStreamHook’ from ‘AllocateTransformBuffer’
libwebp-1.6.0/src/enc/vp8l_enc.c:1575:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:12: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:10: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1577:65: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1576:11: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1581:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1590:8: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1593:24: branch_true: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1591:10: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/enc/vp8l_enc.c:1597:7: branch_false: ...to here
libwebp-1.6.0/src/enc/vp8l_enc.c:1598:12: call_function: calling ‘EncodePalette’ from ‘EncodeStreamHook’
#  476|         const int bit_length = huffman_codes[i].num_symbols;
#  477|         huffman_codes[i].codes = codes;
#  478|->       huffman_codes[i].code_lengths = lengths;
#  479|         codes += bit_length;
#  480|         lengths += bit_length;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
libwebp-1.6.0/src/mux/muxinternal.c:272:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libwebp-1.6.0/src/mux/muxinternal.c:268:28: branch_true: following ‘true’ branch (when ‘current’ is non-NULL)...
libwebp-1.6.0/src/mux/muxinternal.c:269:8: branch_true: ...to here
libwebp-1.6.0/src/mux/muxinternal.c:272:30: danger: dereference of NULL ‘<unknown>’
#  270|         ++count;  // Special case: count all images.
#  271|       } else {
#  272|->       const WebPChunk* const wpi_chunk = *GetChunkListFromId(current, id);
#  273|         if (wpi_chunk != NULL) {
#  274|           const WebPChunkId wpi_chunk_id = ChunkGetIdFromTag(wpi_chunk->tag);

Error: CPPCHECK_WARNING (CWE-758): [#def21]
libwebp-1.6.0/src/utils/bit_reader_inl_utils.h:152: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  150|       const range_t split = br->range >> 1;
#  151|       const range_t value = (range_t)(br->value >> pos);
#  152|->     const int32_t mask = (int32_t)(split - value) >> 31;  // -1 or 0
#  153|       br->bits -= 1;
#  154|       br->range += (range_t)mask;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def22]
libwebp-1.6.0/src/utils/color_cache_utils.h:45:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘color_cache’
libwebp-1.6.0/src/dec/vp8l_dec.c:1718:5: enter_function: entry to ‘VP8LDecodeImage’
libwebp-1.6.0/src/dec/vp8l_dec.c:1722:6: branch_false: following ‘false’ branch (when ‘dec’ is non-NULL)...
libwebp-1.6.0/src/dec/vp8l_dec.c:1728:3: branch_false: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1734:6: branch_true: following ‘true’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1735:19: branch_true: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1738:8: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1743:10: branch_false: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1743:10: call_function: calling ‘AllocateInternalBuffers32b’ from ‘VP8LDecodeImage’
libwebp-1.6.0/src/dec/vp8l_dec.c:1743:10: return_function: returning to ‘VP8LDecodeImage’ from ‘AllocateInternalBuffers32b’
libwebp-1.6.0/src/dec/vp8l_dec.c:1743:8: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1746:9: branch_false: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1746:8: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1753:9: branch_false: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1753:8: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1758:8: branch_false: following ‘false’ branch...
libwebp-1.6.0/src/dec/vp8l_dec.c:1762:9: branch_false: ...to here
libwebp-1.6.0/src/dec/vp8l_dec.c:1776:8: call_function: calling ‘DecodeImageData’ from ‘VP8LDecodeImage’
#   43|       const VP8LColorCache* const cc, uint32_t key) {
#   44|     assert((key >> cc->hash_bits) == 0u);
#   45|->   return cc->colors[key];
#   46|   }
#   47|   

Error: COMPILER_WARNING (CWE-1164): [#def23]
libwebp-1.6.0/swig/libwebp_java_wrap.c:344:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInSchar’ defined but not used
#  344 | static int SWIG_JavaArrayInSchar (JNIEnv *jenv, jbyte **jarr, signed char **carr, jbyteArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~
#  342|   
#  343|   /* signed char[] support */
#  344|-> static int SWIG_JavaArrayInSchar (JNIEnv *jenv, jbyte **jarr, signed char **carr, jbyteArray input) {
#  345|     int i;
#  346|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def24]
libwebp-1.6.0/swig/libwebp_java_wrap.c:365:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutSchar’ defined but not used
#  365 | static void SWIG_JavaArrayArgoutSchar (JNIEnv *jenv, jbyte *jarr, signed char *carr, jbyteArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  363|   }
#  364|   
#  365|-> static void SWIG_JavaArrayArgoutSchar (JNIEnv *jenv, jbyte *jarr, signed char *carr, jbyteArray input) {
#  366|     int i;
#  367|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def25]
libwebp-1.6.0/swig/libwebp_java_wrap.c:373:19: warning[-Wunused-function]: ‘SWIG_JavaArrayOutSchar’ defined but not used
#  373 | static jbyteArray SWIG_JavaArrayOutSchar (JNIEnv *jenv, signed char *result, jsize sz) {
#      |                   ^~~~~~~~~~~~~~~~~~~~~~
#  371|   }
#  372|   
#  373|-> static jbyteArray SWIG_JavaArrayOutSchar (JNIEnv *jenv, signed char *result, jsize sz) {
#  374|     jbyte *arr;
#  375|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def26]
libwebp-1.6.0/swig/libwebp_java_wrap.c:390:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInUchar’ defined but not used
#  390 | static int SWIG_JavaArrayInUchar (JNIEnv *jenv, jshort **jarr, unsigned char **carr, jshortArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~
#  388|   
#  389|   /* unsigned char[] support */
#  390|-> static int SWIG_JavaArrayInUchar (JNIEnv *jenv, jshort **jarr, unsigned char **carr, jshortArray input) {
#  391|     int i;
#  392|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def27]
libwebp-1.6.0/swig/libwebp_java_wrap.c:411:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutUchar’ defined but not used
#  411 | static void SWIG_JavaArrayArgoutUchar (JNIEnv *jenv, jshort *jarr, unsigned char *carr, jshortArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  409|   }
#  410|   
#  411|-> static void SWIG_JavaArrayArgoutUchar (JNIEnv *jenv, jshort *jarr, unsigned char *carr, jshortArray input) {
#  412|     int i;
#  413|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def28]
libwebp-1.6.0/swig/libwebp_java_wrap.c:419:20: warning[-Wunused-function]: ‘SWIG_JavaArrayOutUchar’ defined but not used
#  419 | static jshortArray SWIG_JavaArrayOutUchar (JNIEnv *jenv, unsigned char *result, jsize sz) {
#      |                    ^~~~~~~~~~~~~~~~~~~~~~
#  417|   }
#  418|   
#  419|-> static jshortArray SWIG_JavaArrayOutUchar (JNIEnv *jenv, unsigned char *result, jsize sz) {
#  420|     jshort *arr;
#  421|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def29]
libwebp-1.6.0/swig/libwebp_java_wrap.c:436:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInShort’ defined but not used
#  436 | static int SWIG_JavaArrayInShort (JNIEnv *jenv, jshort **jarr, short **carr, jshortArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~
#  434|   
#  435|   /* short[] support */
#  436|-> static int SWIG_JavaArrayInShort (JNIEnv *jenv, jshort **jarr, short **carr, jshortArray input) {
#  437|     int i;
#  438|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def30]
libwebp-1.6.0/swig/libwebp_java_wrap.c:457:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutShort’ defined but not used
#  457 | static void SWIG_JavaArrayArgoutShort (JNIEnv *jenv, jshort *jarr, short *carr, jshortArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  455|   }
#  456|   
#  457|-> static void SWIG_JavaArrayArgoutShort (JNIEnv *jenv, jshort *jarr, short *carr, jshortArray input) {
#  458|     int i;
#  459|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def31]
libwebp-1.6.0/swig/libwebp_java_wrap.c:465:20: warning[-Wunused-function]: ‘SWIG_JavaArrayOutShort’ defined but not used
#  465 | static jshortArray SWIG_JavaArrayOutShort (JNIEnv *jenv, short *result, jsize sz) {
#      |                    ^~~~~~~~~~~~~~~~~~~~~~
#  463|   }
#  464|   
#  465|-> static jshortArray SWIG_JavaArrayOutShort (JNIEnv *jenv, short *result, jsize sz) {
#  466|     jshort *arr;
#  467|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def32]
libwebp-1.6.0/swig/libwebp_java_wrap.c:482:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInUshort’ defined but not used
#  482 | static int SWIG_JavaArrayInUshort (JNIEnv *jenv, jint **jarr, unsigned short **carr, jintArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~~
#  480|   
#  481|   /* unsigned short[] support */
#  482|-> static int SWIG_JavaArrayInUshort (JNIEnv *jenv, jint **jarr, unsigned short **carr, jintArray input) {
#  483|     int i;
#  484|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def33]
libwebp-1.6.0/swig/libwebp_java_wrap.c:503:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutUshort’ defined but not used
#  503 | static void SWIG_JavaArrayArgoutUshort (JNIEnv *jenv, jint *jarr, unsigned short *carr, jintArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~
#  501|   }
#  502|   
#  503|-> static void SWIG_JavaArrayArgoutUshort (JNIEnv *jenv, jint *jarr, unsigned short *carr, jintArray input) {
#  504|     int i;
#  505|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def34]
libwebp-1.6.0/swig/libwebp_java_wrap.c:511:18: warning[-Wunused-function]: ‘SWIG_JavaArrayOutUshort’ defined but not used
#  511 | static jintArray SWIG_JavaArrayOutUshort (JNIEnv *jenv, unsigned short *result, jsize sz) {
#      |                  ^~~~~~~~~~~~~~~~~~~~~~~
#  509|   }
#  510|   
#  511|-> static jintArray SWIG_JavaArrayOutUshort (JNIEnv *jenv, unsigned short *result, jsize sz) {
#  512|     jint *arr;
#  513|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def35]
libwebp-1.6.0/swig/libwebp_java_wrap.c:528:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInInt’ defined but not used
#  528 | static int SWIG_JavaArrayInInt (JNIEnv *jenv, jint **jarr, int **carr, jintArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~
#  526|   
#  527|   /* int[] support */
#  528|-> static int SWIG_JavaArrayInInt (JNIEnv *jenv, jint **jarr, int **carr, jintArray input) {
#  529|     int i;
#  530|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def36]
libwebp-1.6.0/swig/libwebp_java_wrap.c:549:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutInt’ defined but not used
#  549 | static void SWIG_JavaArrayArgoutInt (JNIEnv *jenv, jint *jarr, int *carr, jintArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~
#  547|   }
#  548|   
#  549|-> static void SWIG_JavaArrayArgoutInt (JNIEnv *jenv, jint *jarr, int *carr, jintArray input) {
#  550|     int i;
#  551|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def37]
libwebp-1.6.0/swig/libwebp_java_wrap.c:557:18: warning[-Wunused-function]: ‘SWIG_JavaArrayOutInt’ defined but not used
#  557 | static jintArray SWIG_JavaArrayOutInt (JNIEnv *jenv, int *result, jsize sz) {
#      |                  ^~~~~~~~~~~~~~~~~~~~
#  555|   }
#  556|   
#  557|-> static jintArray SWIG_JavaArrayOutInt (JNIEnv *jenv, int *result, jsize sz) {
#  558|     jint *arr;
#  559|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def38]
libwebp-1.6.0/swig/libwebp_java_wrap.c:574:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInUint’ defined but not used
#  574 | static int SWIG_JavaArrayInUint (JNIEnv *jenv, jlong **jarr, unsigned int **carr, jlongArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~
#  572|   
#  573|   /* unsigned int[] support */
#  574|-> static int SWIG_JavaArrayInUint (JNIEnv *jenv, jlong **jarr, unsigned int **carr, jlongArray input) {
#  575|     int i;
#  576|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def39]
libwebp-1.6.0/swig/libwebp_java_wrap.c:595:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutUint’ defined but not used
#  595 | static void SWIG_JavaArrayArgoutUint (JNIEnv *jenv, jlong *jarr, unsigned int *carr, jlongArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~
#  593|   }
#  594|   
#  595|-> static void SWIG_JavaArrayArgoutUint (JNIEnv *jenv, jlong *jarr, unsigned int *carr, jlongArray input) {
#  596|     int i;
#  597|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def40]
libwebp-1.6.0/swig/libwebp_java_wrap.c:603:19: warning[-Wunused-function]: ‘SWIG_JavaArrayOutUint’ defined but not used
#  603 | static jlongArray SWIG_JavaArrayOutUint (JNIEnv *jenv, unsigned int *result, jsize sz) {
#      |                   ^~~~~~~~~~~~~~~~~~~~~
#  601|   }
#  602|   
#  603|-> static jlongArray SWIG_JavaArrayOutUint (JNIEnv *jenv, unsigned int *result, jsize sz) {
#  604|     jlong *arr;
#  605|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def41]
libwebp-1.6.0/swig/libwebp_java_wrap.c:620:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInLong’ defined but not used
#  620 | static int SWIG_JavaArrayInLong (JNIEnv *jenv, jint **jarr, long **carr, jintArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~
#  618|   
#  619|   /* long[] support */
#  620|-> static int SWIG_JavaArrayInLong (JNIEnv *jenv, jint **jarr, long **carr, jintArray input) {
#  621|     int i;
#  622|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def42]
libwebp-1.6.0/swig/libwebp_java_wrap.c:641:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutLong’ defined but not used
#  641 | static void SWIG_JavaArrayArgoutLong (JNIEnv *jenv, jint *jarr, long *carr, jintArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~
#  639|   }
#  640|   
#  641|-> static void SWIG_JavaArrayArgoutLong (JNIEnv *jenv, jint *jarr, long *carr, jintArray input) {
#  642|     int i;
#  643|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def43]
libwebp-1.6.0/swig/libwebp_java_wrap.c:649:18: warning[-Wunused-function]: ‘SWIG_JavaArrayOutLong’ defined but not used
#  649 | static jintArray SWIG_JavaArrayOutLong (JNIEnv *jenv, long *result, jsize sz) {
#      |                  ^~~~~~~~~~~~~~~~~~~~~
#  647|   }
#  648|   
#  649|-> static jintArray SWIG_JavaArrayOutLong (JNIEnv *jenv, long *result, jsize sz) {
#  650|     jint *arr;
#  651|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def44]
libwebp-1.6.0/swig/libwebp_java_wrap.c:666:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInUlong’ defined but not used
#  666 | static int SWIG_JavaArrayInUlong (JNIEnv *jenv, jlong **jarr, unsigned long **carr, jlongArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~
#  664|   
#  665|   /* unsigned long[] support */
#  666|-> static int SWIG_JavaArrayInUlong (JNIEnv *jenv, jlong **jarr, unsigned long **carr, jlongArray input) {
#  667|     int i;
#  668|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def45]
libwebp-1.6.0/swig/libwebp_java_wrap.c:687:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutUlong’ defined but not used
#  687 | static void SWIG_JavaArrayArgoutUlong (JNIEnv *jenv, jlong *jarr, unsigned long *carr, jlongArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  685|   }
#  686|   
#  687|-> static void SWIG_JavaArrayArgoutUlong (JNIEnv *jenv, jlong *jarr, unsigned long *carr, jlongArray input) {
#  688|     int i;
#  689|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def46]
libwebp-1.6.0/swig/libwebp_java_wrap.c:695:19: warning[-Wunused-function]: ‘SWIG_JavaArrayOutUlong’ defined but not used
#  695 | static jlongArray SWIG_JavaArrayOutUlong (JNIEnv *jenv, unsigned long *result, jsize sz) {
#      |                   ^~~~~~~~~~~~~~~~~~~~~~
#  693|   }
#  694|   
#  695|-> static jlongArray SWIG_JavaArrayOutUlong (JNIEnv *jenv, unsigned long *result, jsize sz) {
#  696|     jlong *arr;
#  697|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def47]
libwebp-1.6.0/swig/libwebp_java_wrap.c:712:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInLonglong’ defined but not used
#  712 | static int SWIG_JavaArrayInLonglong (JNIEnv *jenv, jlong **jarr, long long **carr, jlongArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~~~~
#  710|   
#  711|   /* long long[] support */
#  712|-> static int SWIG_JavaArrayInLonglong (JNIEnv *jenv, jlong **jarr, long long **carr, jlongArray input) {
#  713|     int i;
#  714|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def48]
libwebp-1.6.0/swig/libwebp_java_wrap.c:733:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutLonglong’ defined but not used
#  733 | static void SWIG_JavaArrayArgoutLonglong (JNIEnv *jenv, jlong *jarr, long long *carr, jlongArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  731|   }
#  732|   
#  733|-> static void SWIG_JavaArrayArgoutLonglong (JNIEnv *jenv, jlong *jarr, long long *carr, jlongArray input) {
#  734|     int i;
#  735|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def49]
libwebp-1.6.0/swig/libwebp_java_wrap.c:741:19: warning[-Wunused-function]: ‘SWIG_JavaArrayOutLonglong’ defined but not used
#  741 | static jlongArray SWIG_JavaArrayOutLonglong (JNIEnv *jenv, long long *result, jsize sz) {
#      |                   ^~~~~~~~~~~~~~~~~~~~~~~~~
#  739|   }
#  740|   
#  741|-> static jlongArray SWIG_JavaArrayOutLonglong (JNIEnv *jenv, long long *result, jsize sz) {
#  742|     jlong *arr;
#  743|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def50]
libwebp-1.6.0/swig/libwebp_java_wrap.c:758:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInFloat’ defined but not used
#  758 | static int SWIG_JavaArrayInFloat (JNIEnv *jenv, jfloat **jarr, float **carr, jfloatArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~
#  756|   
#  757|   /* float[] support */
#  758|-> static int SWIG_JavaArrayInFloat (JNIEnv *jenv, jfloat **jarr, float **carr, jfloatArray input) {
#  759|     int i;
#  760|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def51]
libwebp-1.6.0/swig/libwebp_java_wrap.c:779:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutFloat’ defined but not used
#  779 | static void SWIG_JavaArrayArgoutFloat (JNIEnv *jenv, jfloat *jarr, float *carr, jfloatArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  777|   }
#  778|   
#  779|-> static void SWIG_JavaArrayArgoutFloat (JNIEnv *jenv, jfloat *jarr, float *carr, jfloatArray input) {
#  780|     int i;
#  781|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def52]
libwebp-1.6.0/swig/libwebp_java_wrap.c:787:20: warning[-Wunused-function]: ‘SWIG_JavaArrayOutFloat’ defined but not used
#  787 | static jfloatArray SWIG_JavaArrayOutFloat (JNIEnv *jenv, float *result, jsize sz) {
#      |                    ^~~~~~~~~~~~~~~~~~~~~~
#  785|   }
#  786|   
#  787|-> static jfloatArray SWIG_JavaArrayOutFloat (JNIEnv *jenv, float *result, jsize sz) {
#  788|     jfloat *arr;
#  789|     int i;

Error: COMPILER_WARNING (CWE-1164): [#def53]
libwebp-1.6.0/swig/libwebp_java_wrap.c:804:12: warning[-Wunused-function]: ‘SWIG_JavaArrayInDouble’ defined but not used
#  804 | static int SWIG_JavaArrayInDouble (JNIEnv *jenv, jdouble **jarr, double **carr, jdoubleArray input) {
#      |            ^~~~~~~~~~~~~~~~~~~~~~
#  802|   
#  803|   /* double[] support */
#  804|-> static int SWIG_JavaArrayInDouble (JNIEnv *jenv, jdouble **jarr, double **carr, jdoubleArray input) {
#  805|     int i;
#  806|     jsize sz;

Error: COMPILER_WARNING (CWE-1164): [#def54]
libwebp-1.6.0/swig/libwebp_java_wrap.c:825:13: warning[-Wunused-function]: ‘SWIG_JavaArrayArgoutDouble’ defined but not used
#  825 | static void SWIG_JavaArrayArgoutDouble (JNIEnv *jenv, jdouble *jarr, double *carr, jdoubleArray input) {
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~
#  823|   }
#  824|   
#  825|-> static void SWIG_JavaArrayArgoutDouble (JNIEnv *jenv, jdouble *jarr, double *carr, jdoubleArray input) {
#  826|     int i;
#  827|     jsize sz = (*jenv)->GetArrayLength(jenv, input);

Error: COMPILER_WARNING (CWE-1164): [#def55]
libwebp-1.6.0/swig/libwebp_java_wrap.c:833:21: warning[-Wunused-function]: ‘SWIG_JavaArrayOutDouble’ defined but not used
#  833 | static jdoubleArray SWIG_JavaArrayOutDouble (JNIEnv *jenv, double *result, jsize sz) {
#      |                     ^~~~~~~~~~~~~~~~~~~~~~~
#  831|   }
#  832|   
#  833|-> static jdoubleArray SWIG_JavaArrayOutDouble (JNIEnv *jenv, double *result, jsize sz) {
#  834|     jdouble *arr;
#  835|     int i;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def56]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1440:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1424:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1440:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1440:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGB’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1440:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1444:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1445:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1445:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGB’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1440:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/7)
# 1438|     (void)jenv;
# 1439|     (void)jcls;
# 1440|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1441|     arg2 = (int *)&jarg2; 
# 1442|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def57]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1491:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1475:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1491:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1491:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGR’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1491:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1495:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1496:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1496:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGR’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1491:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
# 1489|     (void)jenv;
# 1490|     (void)jcls;
# 1491|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1492|     arg2 = (int *)&jarg2; 
# 1493|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def58]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1542:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1526:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1542:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1542:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGBA’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1542:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1546:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1547:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1547:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeRGBA’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1542:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/7)
# 1540|     (void)jenv;
# 1541|     (void)jcls;
# 1542|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1543|     arg2 = (int *)&jarg2; 
# 1544|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def59]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1593:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1577:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1593:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1593:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGRA’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1593:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1597:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1598:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1598:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeBGRA’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1593:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/7)
# 1591|     (void)jenv;
# 1592|     (void)jcls;
# 1593|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1594|     arg2 = (int *)&jarg2; 
# 1595|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def60]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1643:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1628:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1643:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1643:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGB’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1643:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1647:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1648:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGB’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1648:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGB’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1643:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/7)
# 1641|     (void)jenv;
# 1642|     (void)jcls;
# 1643|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1644|     arg2 = (int *)&jarg2; 
# 1645|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def61]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1692:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1677:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1692:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1692:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGR’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1692:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1696:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1697:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGR’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1697:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGR’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1692:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/7)
# 1690|     (void)jenv;
# 1691|     (void)jcls;
# 1692|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1693|     arg2 = (int *)&jarg2; 
# 1694|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def62]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1741:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1726:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1741:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1741:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGBA’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1741:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1745:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1746:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGBA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1746:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessRGBA’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1741:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/7)
# 1739|     (void)jenv;
# 1740|     (void)jcls;
# 1741|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1742|     arg2 = (int *)&jarg2; 
# 1743|     arg3 = (int *)&jarg3; 

Error: GCC_ANALYZER_WARNING (CWE-401): [#def63]
libwebp-1.6.0/swig/libwebp_java_wrap.c:1790:78: warning[-Wanalyzer-malloc-leak]: leak of ‘arg1’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1775:31: enter_function: entry to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1790:8: call_function: calling ‘SWIG_JavaArrayInUint8’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1790:8: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGRA’ from ‘SWIG_JavaArrayInUint8’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1790:6: branch_false: following ‘false’ branch...
libwebp-1.6.0/swig/libwebp_java_wrap.c:1794:8: branch_false: ...to here
libwebp-1.6.0/swig/libwebp_java_wrap.c:1795:7: call_function: calling ‘SWIG_JavaThrowException’ from ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGRA’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1795:7: return_function: returning to ‘Java_com_google_webp_libwebpJNI_wrap_1WebPEncodeLosslessBGRA’ from ‘SWIG_JavaThrowException’
libwebp-1.6.0/swig/libwebp_java_wrap.c:1790:78: danger: ‘arg1’ leaks here; was allocated at [(8)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/7)
# 1788|     (void)jenv;
# 1789|     (void)jcls;
# 1790|->   if (!SWIG_JavaArrayInUint8(jenv, &jarr1, (uint8_t **)&arg1, jarg1)) return 0; 
# 1791|     arg2 = (int *)&jarg2; 
# 1792|     arg3 = (int *)&jarg3; 

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-249.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibwebp-1.6.0-4.fc45
store-results-to/tmp/tmpvy339nid/libwebp-1.6.0-4.fc45.tar.xz
time-created2026-08-03 18:10:45
time-finished2026-08-03 18:13:31
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpvy339nid/libwebp-1.6.0-4.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpvy339nid/libwebp-1.6.0-4.fc45.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9