libcap-2.77-2.fc44

List of Findings

Error: CPPCHECK_WARNING (CWE-401): [#def1]
libcap-2.77/libcap/cap_alloc.c:179: error[memleak]: Memory leak: base
#  177|       base->magic = CAP_IAB_MAGIC;
#  178|       base->size = sizeof(struct _cap_alloc_s);
#  179|->     return &base->u.iab;
#  180|   }
#  181|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
libcap-2.77/libcap/cap_alloc.c:179:12: warning[-Wanalyzer-malloc-leak]: leak of ‘base’
libcap-2.77/libcap/cap_alloc.c:172:33: acquire_memory: allocated here
libcap-2.77/libcap/cap_alloc.c:173:8: branch_false: following ‘false’ branch (when ‘base’ is non-NULL)...
libcap-2.77/libcap/cap_alloc.c:177:5: branch_false: ...to here
libcap-2.77/libcap/cap_alloc.c:179:12: danger: ‘base’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  177|       base->magic = CAP_IAB_MAGIC;
#  178|       base->size = sizeof(struct _cap_alloc_s);
#  179|->     return &base->u.iab;
#  180|   }
#  181|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
libcap-2.77/libcap/cap_alloc.c:229:26: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libcap-2.77/libcap/cap_alloc.c:221:33: acquire_memory: allocated here
libcap-2.77/libcap/cap_alloc.c:222:8: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libcap-2.77/libcap/cap_alloc.c:226:5: branch_false: ...to here
libcap-2.77/libcap/cap_alloc.c:229:26: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  227|       data->size = sizeof(struct _cap_alloc_s);
#  228|   
#  229|->     struct cap_launch_s *attr = &data->u.launcher;
#  230|       attr->arg0 = arg0;
#  231|       attr->argv = argv;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
libcap-2.77/libcap/cap_alloc.c:253:26: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libcap-2.77/libcap/cap_alloc.c:245:33: acquire_memory: allocated here
libcap-2.77/libcap/cap_alloc.c:246:8: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libcap-2.77/libcap/cap_alloc.c:250:5: branch_false: ...to here
libcap-2.77/libcap/cap_alloc.c:253:26: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  251|       data->size = sizeof(struct _cap_alloc_s);
#  252|   
#  253|->     struct cap_launch_s *attr = &data->u.launcher;
#  254|       attr->custom_setup_fn = callback_fn;
#  255|       return attr;

Error: GCC_ANALYZER_WARNING (CWE-617): [#def5]
libcap-2.77/libcap/execable.h:72:17: warning[-Wanalyzer-tainted-assertion]: use of attacked-controlled value in condition for assertion
libcap-2.77/libcap/execable.c:42:1: enter_function: entry to ‘__so_start’
libcap-2.77/libcap/execable.c:42:1: call_function: calling ‘__execable_parse_args’ from ‘__so_start’
#   70|   		    free(mem);
#   71|   		}
#   72|-> 		exit(1);
#   73|   	    }
#   74|   	    mem = new_mem;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
libcap-2.77/libcap/execable.h:99:1: warning[-Wanalyzer-malloc-leak]: leak of ‘mem’
libcap-2.77/libcap/execable.c:42:1: enter_function: entry to ‘__so_start’
libcap-2.77/libcap/execable.c:42:1: call_function: calling ‘__execable_parse_args’ from ‘__so_start’
#   97|       *argc_p = argc;
#   98|       *argv_p = argv;
#   99|-> }
#  100|   
#  101|   /*

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
libcap-2.77/libcap/execable.h:99:1: warning[-Wanalyzer-malloc-leak]: leak of ‘new_mem’
libcap-2.77/libcap/execable.c:42:1: enter_function: entry to ‘__so_start’
libcap-2.77/libcap/execable.c:42:1: call_function: calling ‘__execable_parse_args’ from ‘__so_start’
#   97|       *argc_p = argc;
#   98|       *argv_p = argv;
#   99|-> }
#  100|   
#  101|   /*

Error: GCC_ANALYZER_WARNING (CWE-688): [#def8]
libcap-2.77/psx/psx.c:108:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘psx_tracker.pid_path’ where non-null expected
libcap-2.77/psx/psx.c:159:45: enter_function: entry to ‘psx_lock’
libcap-2.77/psx/psx.c:163:9: call_function: calling ‘_psx_proc_start’ from ‘psx_lock’
#  106|   	psx_tracker.pid_path = calloc(1, 3*sizeof(pid) + sizeof(taskdir_fmt));
#  107|       }
#  108|->     sprintf(psx_tracker.pid_path, taskdir_fmt, pid);
#  109|       psx_tracker.state = _PSX_IDLE;
#  110|       psx_tracker.cmd.active = 0;

Scan Properties