libcue-2.3.0-14.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
libcue-2.3.0/cdtext.c:81:33: warning[-Wanalyzer-malloc-leak]: leak of ‘*cdtext.value’
libcue-2.3.0/cdtext.c:77:12: branch_true: following ‘true’ branch (when ‘value’ is non-NULL)...
libcue-2.3.0/cdtext.c:77:12: branch_true: ...to here
libcue-2.3.0/cdtext.c:78:24: branch_true: following ‘true’ branch...
libcue-2.3.0/cdtext.c:79:28: branch_true: ...to here
libcue-2.3.0/cdtext.c:79:28: branch_false: following ‘false’ branch...
libcue-2.3.0/cdtext.c:78:48: branch_false: ...to here
libcue-2.3.0/cdtext.c:78:24: branch_true: following ‘true’ branch...
libcue-2.3.0/cdtext.c:79:28: branch_true: ...to here
libcue-2.3.0/cdtext.c:79:28: branch_true: following ‘true’ branch...
libcue-2.3.0/cdtext.c:80:39: branch_true: ...to here
libcue-2.3.0/cdtext.c:81:49: acquire_memory: allocated here
libcue-2.3.0/cdtext.c:81:33: danger: ‘*cdtext.value’ leaks here; was allocated at [(11)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/10)
#   79|   			if (pti == cdtext->pti) {
#   80|   				free (cdtext->value);
#   81|-> 				cdtext->value = strdup (value);
#   82|   			}
#   83|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
libcue-2.3.0/redhat-linux-build/cue_parser.c:1137:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’
libcue-2.3.0/redhat-linux-build/cue_parser.c:1095:6: branch_true: following ‘true’ branch...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1101:28: branch_true: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1124:10: branch_false: following ‘false’ branch (when ‘yystacksize <= 9999’)...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1126:7: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1135:12: branch_false: following ‘false’ branch (when ‘yyptr’ is non-NULL)...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1137:9: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1137:9: danger: use of uninitialized value ‘yyss’ here
# 1135|           if (! yyptr)
# 1136|             YYNOMEM;
# 1137|->         YYSTACK_RELOCATE (yyss_alloc, yyss);
# 1138|           YYSTACK_RELOCATE (yyvs_alloc, yyvs);
# 1139|   #  undef YYSTACK_RELOCATE

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
libcue-2.3.0/redhat-linux-build/cue_parser.c:1264:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
libcue-2.3.0/redhat-linux-build/cue_parser.c:1095:6: branch_false: following ‘false’ branch...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1159:6: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1159:6: branch_false: following ‘false’ branch (when ‘yystate != 3’)...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1162:3: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1174:6: branch_true: following ‘true’ branch (when ‘yyn == -44’)...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1175:5: branch_true: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1244:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
libcue-2.3.0/redhat-linux-build/cue_parser.c:1246:3: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_parser.c:1264:3: danger: use of uninitialized value ‘*<unknown>’ here
# 1262|        unconditionally makes the parser a bit smaller, and it avoids a
# 1263|        GCC warning that YYVAL may be used uninitialized.  */
# 1264|->   yyval = yyvsp[1-yylen];
# 1265|   
# 1266|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2043:54: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2030:21: enter_function: entry to ‘yy_create_buffer’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2034:24: call_function: inlined call to ‘yyalloc’ from ‘yy_create_buffer’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2035:12: branch_false: following ‘false’ branch...
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2038:2: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2043:54: danger: ‘malloc(64)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
# 2041|   	/* yy_ch_buf has to be 2 characters longer than the size given because
# 2042|   	 * we need to put in 2 end-of-buffer characters.
# 2043|-> 	 */
# 2044|   	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2)  );
# 2045|   	if ( ! b->yy_ch_buf )

Error: CPPCHECK_WARNING (CWE-476): [#def5]
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2084: warning[nullPointer]: Possible null pointer dereference: b
# 2082|       
# 2083|   	yy_flush_buffer( b );
# 2084|-> 
# 2085|   	b->yy_input_file = file;
# 2086|   	b->yy_fill_buffer = 1;

Error: CPPCHECK_WARNING (CWE-476): [#def6]
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2085: warning[nullPointer]: Possible null pointer dereference: b
# 2083|   	yy_flush_buffer( b );
# 2084|   
# 2085|-> 	b->yy_input_file = file;
# 2086|   	b->yy_fill_buffer = 1;
# 2087|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2298:26: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2282:17: enter_function: entry to ‘yy_scan_bytes’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2291:24: call_function: inlined call to ‘yyalloc’ from ‘yy_scan_bytes’
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2292:12: branch_false: following ‘false’ branch...
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2292:12: branch_false: ...to here
libcue-2.3.0/redhat-linux-build/cue_scanner.c:2300:6: call_function: calling ‘yy_scan_buffer’ from ‘yy_scan_bytes’
# 2296|   	for ( i = 0; i < _yybytes_len; ++i )
# 2297|   		buf[i] = yybytes[i];
# 2298|-> 
# 2299|   	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 2300|   

Error: COMPILER_WARNING: [#def8]
libcue-2.3.0/rem.c:110:1: warning[-Wenum-int-mismatch]: conflicting types for ‘rem_get’ due to enum/integer mismatch; have ‘const char *(RemType,  Rem *)’
#  110 | rem_get(        RemType cmt,
#      | ^~~~~~~
libcue-2.3.0/rem.h:27: included_from: Included from here.
libcue-2.3.0/rem.c:27: included_from: Included from here.
libcue-2.3.0/libcue.h:136:24: note: previous declaration of ‘rem_get’ with type ‘const char *(unsigned int,  Rem *)’
#  136 | CUE_EXPORT const char* rem_get(unsigned int, Rem*);
#      |                        ^~~~~~~
#  108|   
#  109|   const char*
#  110|-> rem_get(	RemType cmt,
#  111|   		Rem* rem)
#  112|   {

Error: COMPILER_WARNING: [#def9]
libcue-2.3.0/time.c: scope_hint: In function ‘time_frame_to_mmssff’
libcue-2.3.0/time.c:33:33: warning[-Wformat-overflow=]: ‘%02d’ directive writing between 2 and 3 bytes into a region of size between 0 and 3
#   33 |         sprintf(msf, "%02d:%02d:%02d", minutes, seconds, frames);
#      |                                 ^~~~
libcue-2.3.0/time.c:33:22: note: directive argument in the range [-74, 74]
#   33 |         sprintf(msf, "%02d:%02d:%02d", minutes, seconds, frames);
#      |                      ^~~~~~~~~~~~~~~~
/usr/include/bits/stdio2.h:30:10: note: ‘__sprintf_chk’ output between 9 and 20 bytes into a destination of size 9
#   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   31 |                                   __glibc_objsize (__s), __fmt,
#      |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   32 |                                   __va_arg_pack ());
#      |                                   ~~~~~~~~~~~~~~~~~
#   31|   
#   32|   	time_frame_to_msf(f, &minutes, &seconds, &frames);
#   33|-> 	sprintf(msf, "%02d:%02d:%02d", minutes, seconds, frames);
#   34|   
#   35|   	return msf;

Scan Properties