Newly introduced findings

List of Findings

Error: COMPILER_WARNING (CWE-195): [#def1]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp: scope_hint: In function ‘exr_result_t ht_undo_impl(exr_decode_pipeline_t*, const void*, uint64_t, void*, uint64_t)’
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:207:28: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int64_t’ {aka ‘long int’} and ‘long unsigned int’
#  207 |         if (computedoffset > std::numeric_limits<std::size_t>::max())
#      |             ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  205|               computedoffset += (int64_t) decode->channels[i].width *
#  206|                                 (int64_t) decode->channels[i].bytes_per_element;
#  207|->         if (computedoffset > std::numeric_limits<std::size_t>::max())
#  208|               return EXR_ERR_CORRUPT_CHUNK;
#  209|           cs_to_file_ch[cs_i].raster_line_offset = computedoffset;

Error: COMPILER_WARNING (CWE-195): [#def2]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:227:29: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  227 |     if (decode->chunk.width != image_width
#      |         ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
#  225|           siz.get_image_extent ().x - siz.get_image_offset ().x;
#  226|   
#  227|->     if (decode->chunk.width != image_width
#  228|           || decode->chunk.height != image_height
#  229|           || decode->channel_count != siz.get_num_components())

Error: COMPILER_WARNING (CWE-195): [#def3]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:228:33: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  228 |         || decode->chunk.height != image_height
#      |            ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~
#  226|   
#  227|       if (decode->chunk.width != image_width
#  228|->         || decode->chunk.height != image_height
#  229|           || decode->channel_count != siz.get_num_components())
#  230|           return EXR_ERR_CORRUPT_CHUNK;

Error: COMPILER_WARNING (CWE-195): [#def4]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:229:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int16_t’ {aka ‘short int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  229 |         || decode->channel_count != siz.get_num_components())
#      |            ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~
#  227|       if (decode->chunk.width != image_width
#  228|           || decode->chunk.height != image_height
#  229|->         || decode->channel_count != siz.get_num_components())
#  230|           return EXR_ERR_CORRUPT_CHUNK;
#  231|   

Error: COMPILER_WARNING (CWE-195): [#def5]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:236:45: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  236 |         if (decode->channels[file_i].height != siz.get_recon_height (cs_i) ||
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  234|           int file_i = cs_to_file_ch[cs_i].file_index;
#  235|   
#  236|->         if (decode->channels[file_i].height != siz.get_recon_height (cs_i) ||
#  237|               decode->channels[file_i].width != siz.get_recon_width (cs_i) ||
#  238|               decode->channels[file_i].height != image_height / siz.get_downsampling (cs_i).y ||

Error: COMPILER_WARNING (CWE-195): [#def6]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:237:44: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  237 |             decode->channels[file_i].width != siz.get_recon_width (cs_i) ||
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  235|   
#  236|           if (decode->channels[file_i].height != siz.get_recon_height (cs_i) ||
#  237|->             decode->channels[file_i].width != siz.get_recon_width (cs_i) ||
#  238|               decode->channels[file_i].height != image_height / siz.get_downsampling (cs_i).y ||
#  239|               decode->channels[file_i].width != image_width / siz.get_downsampling (cs_i).x)

Error: COMPILER_WARNING (CWE-195): [#def7]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:238:45: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  238 |             decode->channels[file_i].height != image_height / siz.get_downsampling (cs_i).y ||
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  236|           if (decode->channels[file_i].height != siz.get_recon_height (cs_i) ||
#  237|               decode->channels[file_i].width != siz.get_recon_width (cs_i) ||
#  238|->             decode->channels[file_i].height != image_height / siz.get_downsampling (cs_i).y ||
#  239|               decode->channels[file_i].width != image_width / siz.get_downsampling (cs_i).x)
#  240|               return EXR_ERR_CORRUPT_CHUNK;

Error: COMPILER_WARNING (CWE-195): [#def8]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:239:44: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int32_t’ {aka ‘int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  239 |             decode->channels[file_i].width != image_width / siz.get_downsampling (cs_i).x)
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  237|               decode->channels[file_i].width != siz.get_recon_width (cs_i) ||
#  238|               decode->channels[file_i].height != image_height / siz.get_downsampling (cs_i).y ||
#  239|->             decode->channels[file_i].width != image_width / siz.get_downsampling (cs_i).x)
#  240|               return EXR_ERR_CORRUPT_CHUNK;
#  241|       }

Error: COMPILER_WARNING (CWE-195): [#def9]
openexr-3.4.13/src/lib/OpenEXRCore/internal_ht.cpp:282:32: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int16_t’ {aka ‘short int’} and ‘ojph::ui32’ {aka ‘unsigned int’}
#  282 |                     if (line_c == static_cast<ojph::ui32>(file_c))
#      |                         ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  280|                       if (y % decode->channels[line_c].y_samples != 0) continue;
#  281|   
#  282|->                     if (line_c == static_cast<ojph::ui32>(file_c))
#  283|                       {
#  284|                           cur_line = cs.pull (next_comp);

Error: COMPILER_WARNING: [#def10]
openexr-3.4.13/src/test/OpenEXRCoreTest/read.cpp: scope_hint: In function ‘int hardway_height_p(int, int, int)’
openexr-3.4.13/src/test/OpenEXRCoreTest/read.cpp:681:9: warning[-Wunused-but-set-variable=]: variable ‘off’ set but not used
#  681 |     int off = 0;
#      |         ^~~
#  679|       int nlines = 0;
#  680|       int end = start_y + height;
#  681|->     int off = 0;
#  682|   
#  683|       if (y_sampling <= 1) return height;

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-103.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameopenexr-3.2.4-7.fc44
diffbase-store-results-to/tmp/tmpinvgluod/openexr-3.2.4-7.fc44.tar.xz
diffbase-time-created2026-08-03 18:48:27
diffbase-time-finished2026-08-03 18:52:50
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpinvgluod/openexr-3.2.4-7.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpinvgluod/openexr-3.2.4-7.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-103.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameopenexr-3.4.13-2.fc45
store-results-to/tmp/tmpqooyfyzq/openexr-3.4.13-2.fc45.tar.xz
time-created2026-08-03 18:53:15
time-finished2026-08-03 18:57:00
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpqooyfyzq/openexr-3.4.13-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpqooyfyzq/openexr-3.4.13-2.fc45.src.rpm'
tool-versioncsmock-3.8.7.20260803.142340.gb75b18e-1.el9