# liburing-2.13-2.fc44

## List of Findings

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
    liburing-2.13/examples/helpers.c:71:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
    liburing-2.13/examples/helpers.c:35:14: acquire_resource: stream socket created here
    liburing-2.13/examples/helpers.c:36:12: branch_false: following ‘false’ branch (when ‘fd != -1’)...
    liburing-2.13/examples/helpers.c:41:9: branch_false: ...to here
    liburing-2.13/examples/helpers.c:43:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
    liburing-2.13/examples/helpers.c:48:12: branch_false: ...to here
    liburing-2.13/examples/helpers.c:60:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
    liburing-2.13/examples/helpers.c:65:13: branch_false: ...to here
    liburing-2.13/examples/helpers.c:65:12: branch_true: following ‘true’ branch...
    liburing-2.13/examples/helpers.c:66:17: branch_true: ...to here
    liburing-2.13/examples/helpers.c:71:1: danger: ‘fd’ leaks here
    #   69|
    #   70|   	return fd;
    #   71|-> }
    #   72|
    #   73|   void *t_aligned_alloc(size_t alignment, size_t size)

    Error: CPPCHECK_WARNING (CWE-476): [#def2]
    liburing-2.13/examples/io_uring-close-test.c:69: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovecs
    #   67|   		if (posix_memalign(&buf, 4096, 4096))
    #   68|   			return 1;
    #   69|-> 		iovecs[i].iov_base = buf;
    #   70|   		iovecs[i].iov_len = 4096;
    #   71|   		fsize += 4096;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
    liburing-2.13/examples/io_uring-close-test.c:69:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘iovecs’
    liburing-2.13/examples/io_uring-close-test.c:31:12: branch_false: following ‘false’ branch (when ‘argc > 1’)...
    liburing-2.13/examples/io_uring-close-test.c:36:15: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:37:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-close-test.c:42:15: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:43:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-close-test.c:47:15: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:48:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-close-test.c:53:14: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:54:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-close-test.c:59:13: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:59:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-close-test.c:65:18: branch_false: ...to here
    liburing-2.13/examples/io_uring-close-test.c:65:18: acquire_memory: this call could return NULL
    liburing-2.13/examples/io_uring-close-test.c:66:21: branch_true: following ‘true’ branch (when ‘i != 4’)...
    liburing-2.13/examples/io_uring-close-test.c:67:21: branch_true: ...to here
    liburing-2.13/examples/io_uring-close-test.c:67:21: branch_true: following ‘true’ branch...
    liburing-2.13/examples/io_uring-close-test.c:67:21: branch_true: ...to here
    liburing-2.13/examples/io_uring-close-test.c:69:17: danger: ‘iovecs + (long unsigned int)i * 16’ could be NULL: unchecked value from [(13)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12)
    #   67|   		if (posix_memalign(&buf, 4096, 4096))
    #   68|   			return 1;
    #   69|-> 		iovecs[i].iov_base = buf;
    #   70|   		iovecs[i].iov_len = 4096;
    #   71|   		fsize += 4096;

    Error: CPPCHECK_WARNING (CWE-476): [#def4]
    liburing-2.13/examples/io_uring-close-test.c:70: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovecs
    #   68|   			return 1;
    #   69|   		iovecs[i].iov_base = buf;
    #   70|-> 		iovecs[i].iov_len = 4096;
    #   71|   		fsize += 4096;
    #   72|   	}

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
    liburing-2.13/examples/io_uring-cp.c:105:1: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
    liburing-2.13/examples/io_uring-cp.c:249:5: enter_function: entry to ‘main’
    liburing-2.13/examples/io_uring-cp.c:255:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
    liburing-2.13/examples/io_uring-cp.c:260:16: branch_false: ...to here
    liburing-2.13/examples/io_uring-cp.c:261:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-cp.c:265:17: branch_false: ...to here
    liburing-2.13/examples/io_uring-cp.c:266:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-cp.c:271:13: branch_false: ...to here
    liburing-2.13/examples/io_uring-cp.c:271:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-cp.c:273:13: branch_false: ...to here
    liburing-2.13/examples/io_uring-cp.c:273:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-cp.c:276:15: branch_false: ...to here
    liburing-2.13/examples/io_uring-cp.c:276:15: call_function: calling ‘copy_file’ from ‘main’
    #  103|   	io_uring_sqe_set_data(sqe, data);
    #  104|   	return 0;
    #  105|-> }
    #  106|
    #  107|   static void queue_write(struct io_uring *ring, struct io_data *data)

    Error: CPPCHECK_WARNING (CWE-476): [#def6]
    liburing-2.13/examples/io_uring-test.c:58: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovecs
    #   56|   		if (posix_memalign(&buf, 4096, 4096))
    #   57|   			return 1;
    #   58|-> 		iovecs[i].iov_base = buf;
    #   59|   		iovecs[i].iov_len = 4096;
    #   60|   		fsize += 4096;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
    liburing-2.13/examples/io_uring-test.c:58:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘iovecs’
    liburing-2.13/examples/io_uring-test.c:31:12: branch_false: following ‘false’ branch (when ‘argc > 1’)...
    liburing-2.13/examples/io_uring-test.c:36:15: branch_false: ...to here
    liburing-2.13/examples/io_uring-test.c:37:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-test.c:42:14: branch_false: ...to here
    liburing-2.13/examples/io_uring-test.c:43:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-test.c:48:13: branch_false: ...to here
    liburing-2.13/examples/io_uring-test.c:48:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/io_uring-test.c:54:18: branch_false: ...to here
    liburing-2.13/examples/io_uring-test.c:54:18: acquire_memory: this call could return NULL
    liburing-2.13/examples/io_uring-test.c:55:21: branch_true: following ‘true’ branch (when ‘i != 4’)...
    liburing-2.13/examples/io_uring-test.c:56:21: branch_true: ...to here
    liburing-2.13/examples/io_uring-test.c:56:21: branch_true: following ‘true’ branch...
    liburing-2.13/examples/io_uring-test.c:56:21: branch_true: ...to here
    liburing-2.13/examples/io_uring-test.c:58:17: danger: ‘iovecs + (long unsigned int)i * 16’ could be NULL: unchecked value from [(9)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/8)
    #   56|   		if (posix_memalign(&buf, 4096, 4096))
    #   57|   			return 1;
    #   58|-> 		iovecs[i].iov_base = buf;
    #   59|   		iovecs[i].iov_len = 4096;
    #   60|   		fsize += 4096;

    Error: CPPCHECK_WARNING (CWE-476): [#def8]
    liburing-2.13/examples/io_uring-test.c:59: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovecs
    #   57|   			return 1;
    #   58|   		iovecs[i].iov_base = buf;
    #   59|-> 		iovecs[i].iov_len = 4096;
    #   60|   		fsize += 4096;
    #   61|   	}

    Error: CPPCHECK_WARNING (CWE-682): [#def9]
    liburing-2.13/examples/link-cp.c:73: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
    #   71|
    #   72|   	ptr = malloc(size + sizeof(*data));
    #   73|-> 	data = ptr + size;
    #   74|   	data->index = 0;
    #   75|   	data->offset = offset;

    Error: CPPCHECK_WARNING (CWE-476): [#def10]
    liburing-2.13/examples/proxy.c:435: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovs
    #  433|   	iovs = calloc(nr_bufs, sizeof(struct iovec));
    #  434|   	for (i = 0; i < nr_bufs; i++) {
    #  435|-> 		iovs[i].iov_base = buf;
    #  436|   		iovs[i].iov_len = buf_size;
    #  437|   		buf += buf_size;

    Error: CPPCHECK_WARNING (CWE-476): [#def11]
    liburing-2.13/examples/proxy.c:436: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: iovs
    #  434|   	for (i = 0; i < nr_bufs; i++) {
    #  435|   		iovs[i].iov_base = buf;
    #  436|-> 		iovs[i].iov_len = buf_size;
    #  437|   		buf += buf_size;
    #  438|   	}

    Error: CPPCHECK_WARNING (CWE-476): [#def12]
    liburing-2.13/examples/proxy.c:515: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: sstat
    #  513|   	for (i = 0; i <= nr_bufs; i++) {
    #  514|   		snd_total += cd->snd_bucket[i];
    #  515|-> 		sstat[i].nr_packets = i;
    #  516|   		sstat[i].count = cd->snd_bucket[i];
    #  517|   		rcv_total += cd->rcv_bucket[i];

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
    liburing-2.13/examples/proxy.c:515:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘sstat’
    liburing-2.13/examples/proxy.c:550:13: enter_function: entry to ‘__show_stats’
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:572:12: branch_false: following ‘false’ branch (when ‘qps != 0’)...
    liburing-2.13/examples/proxy.c:575:12: branch_false: ...to here
    liburing-2.13/examples/proxy.c:582:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:583:17: branch_true: ...to here
    liburing-2.13/examples/proxy.c:600:17: call_function: calling ‘show_buckets’ from ‘__show_stats’
    #  513|   	for (i = 0; i <= nr_bufs; i++) {
    #  514|   		snd_total += cd->snd_bucket[i];
    #  515|-> 		sstat[i].nr_packets = i;
    #  516|   		sstat[i].count = cd->snd_bucket[i];
    #  517|   		rcv_total += cd->rcv_bucket[i];

    Error: CPPCHECK_WARNING (CWE-476): [#def14]
    liburing-2.13/examples/proxy.c:516: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: sstat
    #  514|   		snd_total += cd->snd_bucket[i];
    #  515|   		sstat[i].nr_packets = i;
    #  516|-> 		sstat[i].count = cd->snd_bucket[i];
    #  517|   		rcv_total += cd->rcv_bucket[i];
    #  518|   		rstat[i].nr_packets = i;

    Error: CPPCHECK_WARNING (CWE-476): [#def15]
    liburing-2.13/examples/proxy.c:518: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: rstat
    #  516|   		sstat[i].count = cd->snd_bucket[i];
    #  517|   		rcv_total += cd->rcv_bucket[i];
    #  518|-> 		rstat[i].nr_packets = i;
    #  519|   		rstat[i].count = cd->rcv_bucket[i];
    #  520|   	}

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
    liburing-2.13/examples/proxy.c:518:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘rstat’
    liburing-2.13/examples/proxy.c:550:13: enter_function: entry to ‘__show_stats’
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:572:12: branch_false: following ‘false’ branch (when ‘qps != 0’)...
    liburing-2.13/examples/proxy.c:575:12: branch_false: ...to here
    liburing-2.13/examples/proxy.c:582:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:583:17: branch_true: ...to here
    liburing-2.13/examples/proxy.c:600:17: call_function: calling ‘show_buckets’ from ‘__show_stats’
    #  516|   		sstat[i].count = cd->snd_bucket[i];
    #  517|   		rcv_total += cd->rcv_bucket[i];
    #  518|-> 		rstat[i].nr_packets = i;
    #  519|   		rstat[i].count = cd->rcv_bucket[i];
    #  520|   	}

    Error: CPPCHECK_WARNING (CWE-476): [#def17]
    liburing-2.13/examples/proxy.c:519: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: rstat
    #  517|   		rcv_total += cd->rcv_bucket[i];
    #  518|   		rstat[i].nr_packets = i;
    #  519|-> 		rstat[i].count = cd->rcv_bucket[i];
    #  520|   	}
    #  521|

    Error: GCC_ANALYZER_WARNING (CWE-416): [#def18]
    liburing-2.13/examples/proxy.c:534:22: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘rstat’
    liburing-2.13/examples/proxy.c:550:13: enter_function: entry to ‘__show_stats’
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:572:12: branch_false: following ‘false’ branch (when ‘qps != 0’)...
    liburing-2.13/examples/proxy.c:575:12: branch_false: ...to here
    liburing-2.13/examples/proxy.c:582:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:583:17: branch_true: ...to here
    liburing-2.13/examples/proxy.c:600:17: call_function: calling ‘show_buckets’ from ‘__show_stats’
    #  532|   	for (i = 0; i <= nr_bufs; i++) {
    #  533|   		double snd_prc = 0.0, rcv_prc = 0.0;
    #  534|-> 		if (!rstat[i].count && !sstat[i].count)
    #  535|   			continue;
    #  536|   		if (rstat[i].count)

    Error: GCC_ANALYZER_WARNING (CWE-415): [#def19]
    liburing-2.13/examples/proxy.c:546:9: warning[-Wanalyzer-double-free]: double-‘free’ of ‘sstat’
    liburing-2.13/examples/proxy.c:550:13: enter_function: entry to ‘__show_stats’
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:572:12: branch_false: following ‘false’ branch (when ‘qps != 0’)...
    liburing-2.13/examples/proxy.c:575:12: branch_false: ...to here
    liburing-2.13/examples/proxy.c:582:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:583:17: branch_true: ...to here
    liburing-2.13/examples/proxy.c:600:17: call_function: calling ‘show_buckets’ from ‘__show_stats’
    #  544|   	}
    #  545|
    #  546|-> 	free(sstat);
    #  547|   	free(rstat);
    #  548|   }

    Error: GCC_ANALYZER_WARNING (CWE-415): [#def20]
    liburing-2.13/examples/proxy.c:547:9: warning[-Wanalyzer-double-free]: double-‘free’ of ‘rstat’
    liburing-2.13/examples/proxy.c:550:13: enter_function: entry to ‘__show_stats’
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:569:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:570:24: branch_true: ...to here
    liburing-2.13/examples/proxy.c:572:12: branch_false: following ‘false’ branch (when ‘qps != 0’)...
    liburing-2.13/examples/proxy.c:575:12: branch_false: ...to here
    liburing-2.13/examples/proxy.c:582:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/examples/proxy.c:583:17: branch_true: ...to here
    liburing-2.13/examples/proxy.c:600:17: call_function: calling ‘show_buckets’ from ‘__show_stats’
    #  545|
    #  546|   	free(sstat);
    #  547|-> 	free(rstat);
    #  548|   }
    #  549|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def21]
    liburing-2.13/examples/ucontext-cp.c:207:35: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(*<unknown>, 0)’
    liburing-2.13/examples/ucontext-cp.c:174:5: enter_function: entry to ‘main’
    liburing-2.13/examples/ucontext-cp.c:180:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
    liburing-2.13/examples/ucontext-cp.c:185:15: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:186:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:191:21: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:194:21: branch_true: following ‘true’ branch (when ‘i < argc’)...
    liburing-2.13/examples/ucontext-cp.c:197:39: branch_true: ...to here
    liburing-2.13/examples/ucontext-cp.c:199:20: branch_false: following ‘false’ branch (when ‘pctx’ is non-NULL)...
    liburing-2.13/examples/ucontext-cp.c:199:30: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:199:30: call_function: calling ‘setup_context’ from ‘main’
    liburing-2.13/examples/ucontext-cp.c:199:30: return_function: returning to ‘main’ from ‘setup_context’
    liburing-2.13/examples/ucontext-cp.c:199:21: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:202:33: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:202:24: acquire_resource: opened here
    liburing-2.13/examples/ucontext-cp.c:203:20: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:207:35: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:207:35: danger: ‘open(*<unknown>, 0)’ leaks here; was opened at [(19)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/18)
    #  205|   			return 1;
    #  206|   		}
    #  207|-> 		outfd = open(argv[i + 1], O_WRONLY | O_CREAT | O_TRUNC, 0644);
    #  208|   		if (outfd < 0) {
    #  209|   			perror("open outfile");

    Error: CPPCHECK_WARNING (CWE-476): [#def22]
    liburing-2.13/examples/ucontext-cp.c:214: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pbundle
    #  212|
    #  213|   		arguments_bundle *pbundle = malloc(sizeof(*pbundle));
    #  214|-> 		pbundle->pctx = pctx;
    #  215|   		pbundle->psuccess = &success;
    #  216|   		pbundle->pfailure = &failure;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
    liburing-2.13/examples/ucontext-cp.c:214:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘pbundle’
    liburing-2.13/examples/ucontext-cp.c:174:5: enter_function: entry to ‘main’
    liburing-2.13/examples/ucontext-cp.c:180:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
    liburing-2.13/examples/ucontext-cp.c:185:15: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:186:12: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:191:21: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:194:21: branch_true: following ‘true’ branch (when ‘i < argc’)...
    liburing-2.13/examples/ucontext-cp.c:197:39: branch_true: ...to here
    liburing-2.13/examples/ucontext-cp.c:199:20: branch_false: following ‘false’ branch (when ‘pctx’ is non-NULL)...
    liburing-2.13/examples/ucontext-cp.c:199:30: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:199:30: call_function: calling ‘setup_context’ from ‘main’
    liburing-2.13/examples/ucontext-cp.c:199:30: return_function: returning to ‘main’ from ‘setup_context’
    liburing-2.13/examples/ucontext-cp.c:199:21: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:202:33: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:203:20: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:207:35: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:208:20: branch_false: following ‘false’ branch...
    liburing-2.13/examples/ucontext-cp.c:213:45: branch_false: ...to here
    liburing-2.13/examples/ucontext-cp.c:213:45: acquire_memory: this call could return NULL
    liburing-2.13/examples/ucontext-cp.c:214:17: danger: ‘pbundle’ could be NULL: unchecked value from [(23)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/22)
    #  212|
    #  213|   		arguments_bundle *pbundle = malloc(sizeof(*pbundle));
    #  214|-> 		pbundle->pctx = pctx;
    #  215|   		pbundle->psuccess = &success;
    #  216|   		pbundle->pfailure = &failure;

    Error: CPPCHECK_WARNING (CWE-476): [#def24]
    liburing-2.13/examples/ucontext-cp.c:215: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pbundle
    #  213|   		arguments_bundle *pbundle = malloc(sizeof(*pbundle));
    #  214|   		pbundle->pctx = pctx;
    #  215|-> 		pbundle->psuccess = &success;
    #  216|   		pbundle->pfailure = &failure;
    #  217|   		pbundle->infd = infd;

    Error: CPPCHECK_WARNING (CWE-476): [#def25]
    liburing-2.13/examples/ucontext-cp.c:216: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pbundle
    #  214|   		pbundle->pctx = pctx;
    #  215|   		pbundle->psuccess = &success;
    #  216|-> 		pbundle->pfailure = &failure;
    #  217|   		pbundle->infd = infd;
    #  218|   		pbundle->outfd = outfd;

    Error: CPPCHECK_WARNING (CWE-476): [#def26]
    liburing-2.13/examples/ucontext-cp.c:217: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pbundle
    #  215|   		pbundle->psuccess = &success;
    #  216|   		pbundle->pfailure = &failure;
    #  217|-> 		pbundle->infd = infd;
    #  218|   		pbundle->outfd = outfd;
    #  219|

    Error: CPPCHECK_WARNING (CWE-476): [#def27]
    liburing-2.13/examples/ucontext-cp.c:218: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pbundle
    #  216|   		pbundle->pfailure = &failure;
    #  217|   		pbundle->infd = infd;
    #  218|-> 		pbundle->outfd = outfd;
    #  219|
    #  220|   		makecontext(&pctx->ctx_fnew, (void (*)(void)) copy_file_wrapper, 1, pbundle);

    Error: GCC_ANALYZER_WARNING: [#def28]
    liburing-2.13/examples/zcrx.c:356:13: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘fd’
    liburing-2.13/examples/zcrx.c:344:12: branch_true: following ‘true’ branch (when ‘fd == -1’)...
    liburing-2.13/examples/zcrx.c:345:17: branch_true: ...to here
    liburing-2.13/examples/zcrx.c:356:13: danger: ‘fd’ could be invalid
    #  354|   		t_error(1, 0, "bind()");
    #  355|
    #  356|-> 	if (listen(fd, 1024) < 0)
    #  357|   		t_error(1, 0, "listen()");
    #  358|

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def29]
    liburing-2.13/src/include/liburing.h:588:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/buf-ring.c:404:5: enter_function: entry to ‘main’
    liburing-2.13/test/buf-ring.c:410:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/buf-ring.c:413:20: branch_false: ...to here
    liburing-2.13/test/buf-ring.c:415:21: branch_true: following ‘true’ branch...
    liburing-2.13/test/buf-ring.c:416:23: branch_true: ...to here
    liburing-2.13/test/buf-ring.c:417:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/buf-ring.c:421:21: branch_false: ...to here
    liburing-2.13/test/buf-ring.c:421:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/buf-ring.c:424:23: branch_false: ...to here
    liburing-2.13/test/buf-ring.c:425:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/buf-ring.c:430:23: branch_false: ...to here
    liburing-2.13/test/buf-ring.c:431:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/buf-ring.c:436:23: branch_false: ...to here
    liburing-2.13/test/buf-ring.c:436:23: call_function: calling ‘test_mixed_reg’ from ‘main’
    #  586|   	LIBURING_NOEXCEPT
    #  587|   {
    #  588|-> 	sqe->opcode = (__u8) op;
    #  589|   	sqe->fd = fd;
    #  590|   	sqe->off = offset;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def30]
    liburing-2.13/src/include/liburing.h:588:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sqe’
    liburing-2.13/test/io_uring_enter.c:151:13: enter_function: entry to ‘submit_io’
    liburing-2.13/test/io_uring_enter.c:160:14: call_function: calling ‘setup_file’ from ‘submit_io’
    liburing-2.13/test/io_uring_enter.c:160:14: return_function: returning to ‘submit_io’ from ‘setup_file’
    liburing-2.13/test/io_uring_enter.c:161:21: branch_true: following ‘true’ branch (when ‘i < nr’)...
    liburing-2.13/test/io_uring_enter.c:163:23: call_function: inlined call to ‘io_uring_get_sqe’ from ‘submit_io’
    liburing-2.13/test/io_uring_enter.c:163:23: call_function: inlined call to ‘io_uring_get_sqe’ from ‘submit_io’
    liburing-2.13/test/io_uring_enter.c:165:17: call_function: calling ‘io_prep_read’ from ‘submit_io’
    #  586|   	LIBURING_NOEXCEPT
    #  587|   {
    #  588|-> 	sqe->opcode = (__u8) op;
    #  589|   	sqe->fd = fd;
    #  590|   	sqe->off = offset;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def31]
    liburing-2.13/src/include/liburing.h:589:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/vec-regbuf.c:576:5: enter_function: entry to ‘main’
    liburing-2.13/test/vec-regbuf.c:581:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/vec-regbuf.c:584:19: branch_false: ...to here
    liburing-2.13/test/vec-regbuf.c:586:9: call_function: calling ‘probe_support’ from ‘main’
    liburing-2.13/test/vec-regbuf.c:586:9: return_function: returning to ‘main’ from ‘probe_support’
    liburing-2.13/test/vec-regbuf.c:587:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/vec-regbuf.c:592:27: branch_true: ...to here
    liburing-2.13/test/vec-regbuf.c:592:9: call_function: calling ‘init_buffers’ from ‘main’
    liburing-2.13/test/vec-regbuf.c:592:9: return_function: returning to ‘main’ from ‘init_buffers’
    liburing-2.13/test/vec-regbuf.c:595:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/test/vec-regbuf.c:596:22: branch_true: ...to here
    liburing-2.13/test/vec-regbuf.c:600:17: call_function: calling ‘test_basic’ from ‘main’
    #  587|   {
    #  588|   	sqe->opcode = (__u8) op;
    #  589|-> 	sqe->fd = fd;
    #  590|   	sqe->off = offset;
    #  591|   	sqe->addr = (unsigned long) addr;

    Error: CPPCHECK_WARNING (CWE-457): [#def32]
    liburing-2.13/src/include/liburing.h:945: warning[uninitvar]: Uninitialized variable: events
    #  943|   	LIBURING_NOEXCEPT
    #  944|   {
    #  945|-> 	io_uring_prep_rw(IORING_OP_EPOLL_WAIT, sqe, fd, events, maxevents, 0);
    #  946|   	sqe->rw_flags = flags;
    #  947|   }

    Error: CPPCHECK_WARNING (CWE-457): [#def33]
    liburing-2.13/src/include/liburing.h:1024: warning[uninitvar]: Uninitialized variable: buf
    # 1022|   	LIBURING_NOEXCEPT
    # 1023|   {
    # 1024|-> 	io_uring_prep_rw(IORING_OP_READ, sqe, fd, buf, nbytes, offset);
    # 1025|   }
    # 1026|

    Error: CPPCHECK_WARNING (CWE-457): [#def34]
    liburing-2.13/src/include/liburing.h:1172: warning[uninitvar]: Uninitialized variable: buf
    # 1170|   	LIBURING_NOEXCEPT
    # 1171|   {
    # 1172|-> 	io_uring_prep_rw(IORING_OP_RECV, sqe, sockfd, buf, (__u32) len, 0);
    # 1173|   	sqe->msg_flags = (__u32) flags;
    # 1174|   }

    Error: CPPCHECK_WARNING (CWE-457): [#def35]
    liburing-2.13/src/include/liburing.h:1293: warning[uninitvar]: Uninitialized variable: addr
    # 1291|   	LIBURING_NOEXCEPT
    # 1292|   {
    # 1293|-> 	io_uring_prep_rw(IORING_OP_PROVIDE_BUFFERS, sqe, nr, addr, (__u32) len,
    # 1294|   				(__u64) bid);
    # 1295|   	sqe->buf_group = (__u16) bgid;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def36]
    liburing-2.13/src/include/liburing.h:1532:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/bind-listen.c:514:5: enter_function: entry to ‘main’
    liburing-2.13/test/bind-listen.c:519:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/bind-listen.c:527:17: branch_false: ...to here
    liburing-2.13/test/bind-listen.c:528:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/bind-listen.c:530:14: call_function: inlined call to ‘io_uring_opcode_supported’ from ‘main’
    liburing-2.13/test/bind-listen.c:530:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/bind-listen.c:533:15: branch_false: ...to here
    liburing-2.13/test/bind-listen.c:533:15: call_function: calling ‘test_good_server’ from ‘main’
    # 1530|   	LIBURING_NOEXCEPT
    # 1531|   {
    # 1532|-> 	sqe->opcode = (__u8) op;
    # 1533|   	sqe->fd = fd;
    # 1534|   	sqe->cmd_op = cmd_op;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def37]
    liburing-2.13/src/include/liburing.h:1691:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(".short-read", 0)’
    liburing-2.13/test/short-read.c:18:5: enter_function: entry to ‘main’
    liburing-2.13/test/short-read.c:26:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/short-read.c:29:24: branch_false: ...to here
    liburing-2.13/test/short-read.c:34:14: acquire_resource: opened here
    liburing-2.13/test/short-read.c:38:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/short-read.c:43:15: branch_false: ...to here
    liburing-2.13/test/short-read.c:44:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/short-read.c:49:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/short-read.c:49:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/src/include/liburing.h:1691:13: danger: ‘open(".short-read", 0)’ leaks here; was opened at [(4)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/3)
    # 1689|   	 * non-SQPOLL since then we drive updates.
    # 1690|   	 */
    # 1691|-> 	if (ring->flags & IORING_SETUP_SQPOLL)
    # 1692|   		return io_uring_smp_load_acquire(ring->sq.khead);
    # 1693|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def38]
    liburing-2.13/src/include/liburing.h:1691:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(".sync_file_range", 2)’
    liburing-2.13/test/fsync.c:146:12: enter_function: entry to ‘test_sync_file_range’
    liburing-2.13/test/fsync.c:154:14: acquire_resource: opened here
    liburing-2.13/test/fsync.c:158:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fsync.c:163:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_sync_file_range’
    liburing-2.13/test/fsync.c:163:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_sync_file_range’
    liburing-2.13/src/include/liburing.h:1691:13: danger: ‘open(".sync_file_range", 2)’ leaks here; was opened at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1)
    # 1689|   	 * non-SQPOLL since then we drive updates.
    # 1690|   	 */
    # 1691|-> 	if (ring->flags & IORING_SETUP_SQPOLL)
    # 1692|   		return io_uring_smp_load_acquire(ring->sq.khead);
    # 1693|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def39]
    liburing-2.13/src/include/liburing.h:1691:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(".test_fpos_read", 0)’
    liburing-2.13/test/fpos.c:225:5: enter_function: entry to ‘main’
    liburing-2.13/test/fpos.c:230:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/fpos.c:233:15: branch_false: ...to here
    liburing-2.13/test/fpos.c:234:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fpos.c:234:12: branch_false: ...to here
    liburing-2.13/test/fpos.c:239:28: branch_true: following ‘true’ branch (when ‘test != 8’)...
    liburing-2.13/test/fpos.c:240:21: branch_true: ...to here
    liburing-2.13/test/fpos.c:242:33: branch_false: following ‘false’ branch...
    liburing-2.13/test/fpos.c:242:33: branch_false: ...to here
    liburing-2.13/test/fpos.c:244:23: branch_false: following ‘false’ branch (when ‘write == 0’)...
    liburing-2.13/test/fpos.c:246:27: branch_false: ...to here
    liburing-2.13/test/fpos.c:246:27: call_function: calling ‘test_read’ from ‘main’
    # 1689|   	 * non-SQPOLL since then we drive updates.
    # 1690|   	 */
    # 1691|-> 	if (ring->flags & IORING_SETUP_SQPOLL)
    # 1692|   		return io_uring_smp_load_acquire(ring->sq.khead);
    # 1693|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def40]
    liburing-2.13/src/include/liburing.h:1691:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(fname, 16384)’
    liburing-2.13/test/sqwait.c:42:5: enter_function: entry to ‘main’
    liburing-2.13/test/sqwait.c:63:21: branch_true: following ‘true’ branch (when ‘i != 256’)...
    liburing-2.13/test/sqwait.c:64:21: branch_true: ...to here
    liburing-2.13/test/sqwait.c:64:21: branch_true: following ‘true’ branch...
    liburing-2.13/test/sqwait.c:70:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/sqwait.c:78:14: branch_false: ...to here
    liburing-2.13/test/sqwait.c:78:14: acquire_resource: opened here
    liburing-2.13/test/sqwait.c:79:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/sqwait.c:79:12: branch_false: ...to here
    liburing-2.13/test/sqwait.c:88:21: branch_true: following ‘true’ branch (when ‘i != 10000’)...
    liburing-2.13/test/sqwait.c:91:23: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/sqwait.c:91:23: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/sqwait.c:92:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/sqwait.c:93:31: branch_true: ...to here
    liburing-2.13/test/sqwait.c:94:28: branch_true: following ‘true’ branch...
    liburing-2.13/test/sqwait.c:95:36: branch_true: ...to here
    liburing-2.13/src/include/liburing.h:1691:13: danger: ‘open(fname, 16384)’ leaks here; was opened at [(8)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/7)
    # 1689|   	 * non-SQPOLL since then we drive updates.
    # 1690|   	 */
    # 1691|-> 	if (ring->flags & IORING_SETUP_SQPOLL)
    # 1692|   		return io_uring_smp_load_acquire(ring->sq.khead);
    # 1693|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def41]
    liburing-2.13/src/include/liburing.h:1691:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(path, 0)’
    liburing-2.13/test/statx.c:155:12: enter_function: entry to ‘test_statx_fd’
    liburing-2.13/test/statx.c:162:14: acquire_resource: opened here
    liburing-2.13/test/statx.c:163:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/statx.c:170:9: branch_false: ...to here
    liburing-2.13/test/statx.c:172:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_statx_fd’
    liburing-2.13/test/statx.c:172:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_statx_fd’
    liburing-2.13/src/include/liburing.h:1691:13: danger: ‘open(path, 0)’ leaks here; was opened at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1)
    # 1689|   	 * non-SQPOLL since then we drive updates.
    # 1690|   	 */
    # 1691|-> 	if (ring->flags & IORING_SETUP_SQPOLL)
    # 1692|   		return io_uring_smp_load_acquire(ring->sq.khead);
    # 1693|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def42]
    liburing-2.13/src/include/liburing.h:1879:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
    liburing-2.13/test/defer-taskrun.c:335:5: enter_function: entry to ‘main’
    liburing-2.13/test/defer-taskrun.c:340:12: branch_false: following ‘false’ branch (when ‘argc <= 2’)...
    liburing-2.13/test/defer-taskrun.c:342:12: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:342:12: branch_true: following ‘true’ branch (when ‘argc == 2’)...
    liburing-2.13/test/defer-taskrun.c:348:17: branch_true: ...to here
    liburing-2.13/test/defer-taskrun.c:351:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/defer-taskrun.c:354:15: branch_true: ...to here
    liburing-2.13/test/defer-taskrun.c:354:15: call_function: calling ‘test_thread_shutdown’ from ‘main’
    liburing-2.13/test/defer-taskrun.c:354:15: return_function: returning to ‘main’ from ‘test_thread_shutdown’
    liburing-2.13/test/defer-taskrun.c:355:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/defer-taskrun.c:360:15: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:360:15: call_function: calling ‘test_exec’ from ‘main’
    # 1877|   	if (nr_available)
    # 1878|   		*nr_available = available;
    # 1879|-> 	return err;
    # 1880|   }
    # 1881|

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def43]
    liburing-2.13/src/setup.c:359:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sq_array’
    liburing-2.13/src/setup.c:597:16: enter_function: entry to ‘io_uring_mlock_size’
    liburing-2.13/src/setup.c:603:16: call_function: calling ‘io_uring_mlock_size_params’ from ‘io_uring_mlock_size’
    #  357|   		sq_array = ring->sq.array;
    #  358|   		for (index = 0; index < sq_entries; index++)
    #  359|-> 			sq_array[index] = index;
    #  360|   	}
    #  361|   	ring->features = p->features;

    Error: GCC_ANALYZER_WARNING: [#def44]
    liburing-2.13/test/232c93d07b74.c:95:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘s0’
    liburing-2.13/test/232c93d07b74.c:67:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/232c93d07b74.c:68:26: branch_true: ...to here
    liburing-2.13/test/232c93d07b74.c:72:17: branch_true: following ‘true’ branch (when ‘res != -1’)...
    liburing-2.13/test/232c93d07b74.c:73:23: branch_true: ...to here
    liburing-2.13/test/232c93d07b74.c:74:17: branch_true: following ‘true’ branch (when ‘res != -1’)...
    liburing-2.13/test/232c93d07b74.c:78:17: branch_true: ...to here
    liburing-2.13/test/232c93d07b74.c:81:17: branch_true: following ‘true’ branch...
    liburing-2.13/test/232c93d07b74.c:82:32: branch_true: ...to here
    liburing-2.13/test/232c93d07b74.c:95:15: danger: ‘s0’ could be invalid
    #   93|   		assert(res != -1);
    #   94|   	}
    #   95|-> 	res = listen(s0, 128);
    #   96|   	assert(res != -1);
    #   97|

    Error: GCC_ANALYZER_WARNING (CWE-479): [#def45]
    liburing-2.13/test/35fa71a030ca.c:316:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
    liburing-2.13/test/35fa71a030ca.c:319:5: enter_function: entry to ‘main’
    liburing-2.13/test/35fa71a030ca.c:321:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/35fa71a030ca.c:323:9: branch_false: ...to here
    liburing-2.13/test/35fa71a030ca.c:316:9: danger: call to ‘exit’ from within signal handler
    #  314|   static void sig_int(int sig)
    #  315|   {
    #  316|-> 	exit(0);
    #  317|   }
    #  318|

    Error: GCC_ANALYZER_WARNING (CWE-479): [#def46]
    liburing-2.13/test/a4c0b3decb33.c:171:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
    liburing-2.13/test/a4c0b3decb33.c:174:5: enter_function: entry to ‘main’
    liburing-2.13/test/a4c0b3decb33.c:176:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/a4c0b3decb33.c:178:9: branch_false: ...to here
    liburing-2.13/test/a4c0b3decb33.c:169:13: enter_function: entry to ‘sig_int’
    liburing-2.13/test/a4c0b3decb33.c:171:9: danger: call to ‘exit’ from within signal handler
    #  169|   static void sig_int(int sig)
    #  170|   {
    #  171|-> 	exit(0);
    #  172|   }
    #  173|

    Error: GCC_ANALYZER_WARNING: [#def47]
    liburing-2.13/test/accept-non-empty.c:56:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘fd’
    liburing-2.13/test/accept-non-empty.c:222:5: enter_function: entry to ‘main’
    liburing-2.13/test/accept-non-empty.c:226:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/accept-non-empty.c:229:15: branch_false: ...to here
    liburing-2.13/test/accept-non-empty.c:229:15: call_function: calling ‘test’ from ‘main’
    #   54|   	ret = bind(fd, (struct sockaddr *) &addr, sizeof(addr));
    #   55|   	assert(ret != -1);
    #   56|-> 	ret = listen(fd, 20000);
    #   57|   	assert(ret != -1);
    #   58|

    Error: CPPCHECK_WARNING (CWE-476): [#def48]
    liburing-2.13/test/accept-non-empty.c:127: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: fds
    #  125|
    #  126|   	fds = malloc(MAX_ACCEPTS * sizeof(int));
    #  127|-> 	memset(fds, -1, MAX_ACCEPTS * sizeof(int));
    #  128|
    #  129|   	if (fixed) {

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def49]
    liburing-2.13/test/accept-non-empty.c:127:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘fds’ where non-null expected
    liburing-2.13/test/accept-non-empty.c:222:5: enter_function: entry to ‘main’
    liburing-2.13/test/accept-non-empty.c:226:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/accept-non-empty.c:229:15: branch_false: ...to here
    liburing-2.13/test/accept-non-empty.c:229:15: call_function: calling ‘test’ from ‘main’
    #  125|
    #  126|   	fds = malloc(MAX_ACCEPTS * sizeof(int));
    #  127|-> 	memset(fds, -1, MAX_ACCEPTS * sizeof(int));
    #  128|
    #  129|   	if (fixed) {

    Error: GCC_ANALYZER_WARNING: [#def50]
    liburing-2.13/test/accept.c:204:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘fd’
    liburing-2.13/test/accept.c:748:5: enter_function: entry to ‘main’
    liburing-2.13/test/accept.c:752:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/accept.c:755:15: branch_false: ...to here
    liburing-2.13/test/accept.c:755:15: call_function: calling ‘test_accept’ from ‘main’
    #  202|   	ret = t_bind_ephemeral_port(fd, addr);
    #  203|   	assert(!ret);
    #  204|-> 	ret = listen(fd, 128);
    #  205|   	assert(ret != -1);
    #  206|

    Error: CPPCHECK_WARNING (CWE-909): [#def51]
    liburing-2.13/test/bind-listen.c:134: error[uninitStructMember]: Uninitialized struct member: cqe.res
    #  132|   		close(fd);
    #  133|   	} else if (res < 0) {
    #  134|-> 		fprintf(stderr, "getsockname server failed. %d\n", cqe->res);
    #  135|   		return T_EXIT_FAIL;
    #  136|   	}

    Error: CPPCHECK_WARNING (CWE-401): [#def52]
    liburing-2.13/test/buf-ring.c:353: error[memleak]: Memory leak: buffers
    #  351|   	read_fd = open("/dev/zero", O_RDONLY);
    #  352|   	if (read_fd < 0)
    #  353|-> 		return T_EXIT_SKIP;
    #  354|
    #  355|   	for (loop = 0; loop < loops; loop++) {

    Error: CPPCHECK_WARNING (CWE-476): [#def53]
    liburing-2.13/test/coredump.c:41: error[nullPointer]: Null pointer dereference: ptr
    #   39|
    #   40|   	io_uring_submit(&ring);
    #   41|-> 	*ptr = 0;
    #   42|   	exit(0);
    #   43|   }

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def54]
    liburing-2.13/test/coredump.c:41:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/coredump.c:20:13: enter_function: entry to ‘test’
    liburing-2.13/test/coredump.c:28:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/coredump.c:33:9: branch_false: ...to here
    liburing-2.13/test/coredump.c:35:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test’
    liburing-2.13/test/coredump.c:35:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test’
    liburing-2.13/test/coredump.c:41:9: danger: dereference of NULL ‘0’
    #   39|
    #   40|   	io_uring_submit(&ring);
    #   41|-> 	*ptr = 0;
    #   42|   	exit(0);
    #   43|   }

    Error: GCC_ANALYZER_WARNING (CWE-479): [#def55]
    liburing-2.13/test/d77a67ed5f27.c:13:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
    liburing-2.13/test/d77a67ed5f27.c:16:5: enter_function: entry to ‘main’
    liburing-2.13/test/d77a67ed5f27.c:24:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/d77a67ed5f27.c:27:9: branch_false: ...to here
    liburing-2.13/test/d77a67ed5f27.c:10:13: enter_function: entry to ‘sig_alrm’
    liburing-2.13/test/d77a67ed5f27.c:13:9: danger: call to ‘exit’ from within signal handler
    #   11|   {
    #   12|   	fprintf(stderr, "Timed out!\n");
    #   13|-> 	exit(1);
    #   14|   }
    #   15|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def56]
    liburing-2.13/test/defer-taskrun.c:221:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
    liburing-2.13/test/defer-taskrun.c:180:9: branch_false: following ‘false’ branch (when ‘fork_pid >= 0’)...
    liburing-2.13/test/defer-taskrun.c:181:12: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:181:12: branch_false: following ‘false’ branch (when ‘fork_pid == 0’)...
    liburing-2.13/test/defer-taskrun.c:192:15: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:194:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/defer-taskrun.c:197:12: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:197:12: branch_true: following ‘true’ branch (when ‘filename’ is non-NULL)...
    liburing-2.13/test/defer-taskrun.c:198:22: branch_true: ...to here
    liburing-2.13/test/defer-taskrun.c:198:22: acquire_resource: opened here
    liburing-2.13/test/defer-taskrun.c:199:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/defer-taskrun.c:211:9: branch_false: ...to here
    liburing-2.13/test/defer-taskrun.c:221:1: danger: ‘fd’ leaks here; was opened at [(9)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/8)
    #  219|   	fprintf(stderr, "execve failed %d\n", ret);
    #  220|   	return T_EXIT_FAIL;
    #  221|-> }
    #  222|
    #  223|   static int test_flag(void)

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def57]
    liburing-2.13/test/eploop.c:54:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/eploop.c:17:5: enter_function: entry to ‘main’
    liburing-2.13/test/eploop.c:25:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/eploop.c:28:15: branch_false: ...to here
    liburing-2.13/test/eploop.c:29:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/eploop.c:34:19: branch_false: ...to here
    liburing-2.13/test/eploop.c:35:12: branch_false: following ‘false’ branch (when ‘epollfd >= 0’)...
    liburing-2.13/test/eploop.c:40:9: branch_false: ...to here
    liburing-2.13/test/eploop.c:43:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
    liburing-2.13/test/eploop.c:48:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/eploop.c:48:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/eploop.c:53:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/eploop.c:53:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/eploop.c:54:9: danger: dereference of NULL ‘_io_uring_get_sqe(&ring)’
    #   52|
    #   53|   	sqe = io_uring_get_sqe(&ring);
    #   54|-> 	sqe->user_data = 2;
    #   55|   	io_uring_prep_nop(sqe);
    #   56|   	io_uring_submit(&ring);

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def58]
    liburing-2.13/test/evloop.c:53:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/evloop.c:19:5: enter_function: entry to ‘main’
    liburing-2.13/test/evloop.c:26:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/evloop.c:29:15: branch_false: ...to here
    liburing-2.13/test/evloop.c:30:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/evloop.c:35:15: branch_false: ...to here
    liburing-2.13/test/evloop.c:36:12: branch_false: following ‘false’ branch (when ‘efd >= 0’)...
    liburing-2.13/test/evloop.c:41:15: branch_false: ...to here
    liburing-2.13/test/evloop.c:42:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/evloop.c:47:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/evloop.c:47:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/evloop.c:52:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/evloop.c:52:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘main’
    liburing-2.13/test/evloop.c:53:9: danger: dereference of NULL ‘_io_uring_get_sqe(&ring)’
    #   51|
    #   52|   	sqe = io_uring_get_sqe(&ring);
    #   53|-> 	sqe->user_data = 2;
    #   54|   	io_uring_prep_nop(sqe);
    #   55|   	io_uring_submit(&ring);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def59]
    liburing-2.13/test/fc2a85cb02ef.c:51:3: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/proc/thread-self/fail-nth", 2)’
    liburing-2.13/test/fc2a85cb02ef.c:47:8: acquire_resource: opened here
    liburing-2.13/test/fc2a85cb02ef.c:48:6: branch_false: following ‘false’ branch...
    liburing-2.13/test/fc2a85cb02ef.c:51:3: branch_false: ...to here
    liburing-2.13/test/fc2a85cb02ef.c:51:3: danger: ‘open("/proc/thread-self/fail-nth", 2)’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
    #   49|       exit(1);
    #   50|     char buf[16];
    #   51|->   sprintf(buf, "%d", nth + 1);
    #   52|     if (write(fd, buf, strlen(buf)) != (ssize_t)strlen(buf))
    #   53|       exit(1);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def60]
    liburing-2.13/test/fc2a85cb02ef.c:130:27: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘<return-value>’
    liburing-2.13/test/fc2a85cb02ef.c:84:5: enter_function: entry to ‘main’
    liburing-2.13/test/fc2a85cb02ef.c:86:6: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/fc2a85cb02ef.c:88:3: branch_false: ...to here
    liburing-2.13/test/fc2a85cb02ef.c:89:7: call_function: calling ‘setup_fault’ from ‘main’
    liburing-2.13/test/fc2a85cb02ef.c:89:7: return_function: returning to ‘main’ from ‘setup_fault’
    liburing-2.13/test/fc2a85cb02ef.c:89:6: branch_false: following ‘false’ branch...
    liburing-2.13/test/fc2a85cb02ef.c:94:3: branch_false: ...to here
    liburing-2.13/test/fc2a85cb02ef.c:126:6: branch_false: following ‘false’ branch...
    liburing-2.13/test/fc2a85cb02ef.c:128:28: branch_false: ...to here
    liburing-2.13/test/fc2a85cb02ef.c:129:3: call_function: calling ‘inject_fault’ from ‘main’
    liburing-2.13/test/fc2a85cb02ef.c:130:27: danger: ‘<return-value>’ leaks here; was opened at [(16)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/15)
    #  128|     *(uint32_t*)0x20000080 = r[1];
    #  129|     inject_fault(1);
    #  130|->   __sys_io_uring_register(r[0], 2ul, (const void *) 0x20000080ul, 1ul);
    #  131|     return T_EXIT_PASS;
    #  132|   }

    Error: GCC_ANALYZER_WARNING (CWE-910): [#def61]
    liburing-2.13/test/fd-install.c:227:15: warning[-Wanalyzer-fd-use-after-close]: ‘read’ on closed file descriptor ‘fds[0]’
    liburing-2.13/test/fd-install.c:420:5: enter_function: entry to ‘main’
    liburing-2.13/test/fd-install.c:425:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/fd-install.c:428:15: branch_false: ...to here
    liburing-2.13/test/fd-install.c:429:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fd-install.c:434:15: branch_false: ...to here
    liburing-2.13/test/fd-install.c:434:15: call_function: calling ‘test_working’ from ‘main’
    #  225|
    #  226|   	/* normal read should fail */
    #  227|-> 	ret = read(fds[0], buf, 1);
    #  228|   	if (ret != -1) {
    #  229|   		fprintf(stderr, "unexpected read ret %d\n", ret);

    Error: CPPCHECK_WARNING (CWE-401): [#def62]
    liburing-2.13/test/fdinfo-sqpoll.c:42: error[memleak]: Memory leak: buf
    #   40|   	if (fd < 0) {
    #   41|   		perror("open");
    #   42|-> 		return NULL;
    #   43|   	}
    #   44|

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def63]
    liburing-2.13/test/fdinfo-sqpoll.c:59:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
    liburing-2.13/test/fdinfo-sqpoll.c:36:15: acquire_memory: allocated here
    liburing-2.13/test/fdinfo-sqpoll.c:40:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/fdinfo-sqpoll.c:41:17: branch_true: ...to here
    liburing-2.13/test/fdinfo-sqpoll.c:59:1: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
    #   57|   	free(buf);
    #   58|   	return NULL;
    #   59|-> }
    #   60|
    #   61|   static int __test(void)

    Error: CPPCHECK_WARNING (CWE-401): [#def64]
    liburing-2.13/test/fdinfo.c:39: error[memleak]: Memory leak: buf
    #   37|   	if (fd < 0) {
    #   38|   		perror("open");
    #   39|-> 		return;
    #   40|   	}
    #   41|

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def65]
    liburing-2.13/test/fdinfo.c:56:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
    liburing-2.13/test/fdinfo.c:337:12: enter_function: entry to ‘test_eventfd_read’
    liburing-2.13/test/fdinfo.c:348:12: branch_false: following ‘false’ branch (when ‘ret != 1’)...
    liburing-2.13/test/fdinfo.c:350:12: branch_false: ...to here
    liburing-2.13/test/fdinfo.c:350:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
    liburing-2.13/test/fdinfo.c:357:14: branch_false: ...to here
    liburing-2.13/test/fdinfo.c:358:12: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
    liburing-2.13/test/fdinfo.c:362:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_eventfd_read’
    liburing-2.13/test/fdinfo.c:362:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_eventfd_read’
    liburing-2.13/test/fdinfo.c:365:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fdinfo.c:369:9: branch_false: ...to here
    liburing-2.13/test/fdinfo.c:369:9: call_function: calling ‘fdinfo_read’ from ‘test_eventfd_read’
    #   54|   	close(fd);
    #   55|   	free(buf);
    #   56|-> }
    #   57|
    #   58|   static int __test_io(const char *file, struct io_uring *ring, int write,

    Error: CPPCHECK_WARNING (CWE-457): [#def66]
    liburing-2.13/test/file-register.c:726: error[uninitvar]: Uninitialized variable: buffer
    #  724|   		return -1;
    #  725|   	}
    #  726|-> 	io_uring_prep_write(sqe, 1, buffer, sizeof(buffer), 0);
    #  727|   	sqe->flags |= IOSQE_FIXED_FILE;
    #  728|   	sqe->user_data = 2;

    Error: GCC_ANALYZER_WARNING (CWE-479): [#def67]
    liburing-2.13/test/files-exit-hang-poll.c:56:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
    liburing-2.13/test/files-exit-hang-poll.c:59:5: enter_function: entry to ‘main’
    liburing-2.13/test/files-exit-hang-poll.c:66:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/files-exit-hang-poll.c:69:26: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:70:12: branch_false: following ‘false’ branch (when ‘sock_listen_fd >= 0’)...
    liburing-2.13/test/files-exit-hang-poll.c:75:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:81:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-poll.c:86:13: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:86:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-poll.c:91:13: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:91:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-poll.c:94:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:94:9: call_function: calling ‘add_poll’ from ‘main’
    liburing-2.13/test/files-exit-hang-poll.c:94:9: return_function: returning to ‘main’ from ‘add_poll’
    liburing-2.13/test/files-exit-hang-poll.c:95:9: call_function: calling ‘add_accept’ from ‘main’
    liburing-2.13/test/files-exit-hang-poll.c:95:9: return_function: returning to ‘main’ from ‘add_accept’
    liburing-2.13/test/files-exit-hang-poll.c:98:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-poll.c:103:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-poll.c:54:13: enter_function: entry to ‘alarm_sig’
    liburing-2.13/test/files-exit-hang-poll.c:56:9: danger: call to ‘exit’ from within signal handler
    #   54|   static void alarm_sig(int sig)
    #   55|   {
    #   56|-> 	exit(0);
    #   57|   }
    #   58|

    Error: GCC_ANALYZER_WARNING (CWE-479): [#def68]
    liburing-2.13/test/files-exit-hang-timeout.c:63:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
    liburing-2.13/test/files-exit-hang-timeout.c:66:5: enter_function: entry to ‘main’
    liburing-2.13/test/files-exit-hang-timeout.c:74:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/files-exit-hang-timeout.c:77:26: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-timeout.c:78:12: branch_false: following ‘false’ branch (when ‘sock_listen_fd >= 0’)...
    liburing-2.13/test/files-exit-hang-timeout.c:83:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-timeout.c:105:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-timeout.c:110:13: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-timeout.c:110:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-timeout.c:113:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-timeout.c:113:9: call_function: calling ‘add_timeout’ from ‘main’
    liburing-2.13/test/files-exit-hang-timeout.c:113:9: return_function: returning to ‘main’ from ‘add_timeout’
    liburing-2.13/test/files-exit-hang-timeout.c:114:9: call_function: calling ‘add_accept’ from ‘main’
    liburing-2.13/test/files-exit-hang-timeout.c:114:9: return_function: returning to ‘main’ from ‘add_accept’
    liburing-2.13/test/files-exit-hang-timeout.c:117:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/files-exit-hang-timeout.c:122:9: branch_false: ...to here
    liburing-2.13/test/files-exit-hang-timeout.c:61:13: enter_function: entry to ‘alarm_sig’
    liburing-2.13/test/files-exit-hang-timeout.c:63:9: danger: call to ‘exit’ from within signal handler
    #   61|   static void alarm_sig(int sig)
    #   62|   {
    #   63|-> 	exit(0);
    #   64|   }
    #   65|

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def69]
    liburing-2.13/test/fixed-buf-iter.c:42:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(4096)’ where non-null expected
    liburing-2.13/test/fixed-buf-iter.c:28:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-buf-iter.c:33:18: branch_false: ...to here
    liburing-2.13/test/fixed-buf-iter.c:34:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-buf-iter.c:34:12: branch_false: ...to here
    liburing-2.13/test/fixed-buf-iter.c:39:21: branch_true: following ‘true’ branch (when ‘i == 0’)...
    liburing-2.13/test/fixed-buf-iter.c:40:35: branch_true: ...to here
    liburing-2.13/test/fixed-buf-iter.c:40:35: acquire_memory: this call could return NULL
    liburing-2.13/test/fixed-buf-iter.c:42:17: danger: argument 1 (‘malloc(4096)’) from [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6) could be NULL where non-null expected
    #   40|   		iov[i].iov_base = malloc(BUF_SIZE);
    #   41|   		iov[i].iov_len = BUF_SIZE;
    #   42|-> 		memset(iov[i].iov_base, 0, BUF_SIZE);
    #   43|   	}
    #   44|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def70]
    liburing-2.13/test/fixed-link.c:42:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/zero", 0)’
    liburing-2.13/test/fixed-link.c:21:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/fixed-link.c:24:14: branch_false: ...to here
    liburing-2.13/test/fixed-link.c:24:14: acquire_resource: opened here
    liburing-2.13/test/fixed-link.c:25:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-link.c:30:13: branch_false: ...to here
    liburing-2.13/test/fixed-link.c:30:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-link.c:30:12: branch_false: ...to here
    liburing-2.13/test/fixed-link.c:36:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/test/fixed-link.c:37:38: branch_true: ...to here
    liburing-2.13/test/fixed-link.c:42:12: danger: ‘open("/dev/zero", 0)’ leaks here; was opened at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
    #   40|
    #   41|   	ret = io_uring_register_buffers(&ring, iovecs, IOVECS_LEN);
    #   42|-> 	if (ret) {
    #   43|   		fprintf(stderr, "Failed to register buffers\n");
    #   44|   		return T_EXIT_FAIL;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def71]
    liburing-2.13/test/fixed-seg.c:135:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/urandom", 0)’
    liburing-2.13/test/fixed-seg.c:117:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-seg.c:121:15: branch_false: ...to here
    liburing-2.13/test/fixed-seg.c:124:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/fixed-seg.c:124:20: branch_true: ...to here
    liburing-2.13/test/fixed-seg.c:124:13: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-seg.c:129:18: branch_false: ...to here
    liburing-2.13/test/fixed-seg.c:129:18: acquire_resource: opened here
    liburing-2.13/test/fixed-seg.c:135:13: danger: ‘open("/dev/urandom", 0)’ leaks here; was opened at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
    #  133|   	}
    #  134|
    #  135|-> 	if (posix_memalign(&wvec.iov_base, 4096, 512*1024))
    #  136|   		goto err;
    #  137|   	wvec.iov_len = 512*1024;

    Error: GCC_ANALYZER_WARNING: [#def72]
    liburing-2.13/test/fixed-seg.c:139:15: warning[-Wanalyzer-fd-use-without-check]: ‘read’ on possibly invalid file descriptor ‘open("/dev/urandom", 0)’
    liburing-2.13/test/fixed-seg.c:117:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-seg.c:121:15: branch_false: ...to here
    liburing-2.13/test/fixed-seg.c:124:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/fixed-seg.c:124:20: branch_true: ...to here
    liburing-2.13/test/fixed-seg.c:124:13: branch_false: following ‘false’ branch...
    liburing-2.13/test/fixed-seg.c:129:18: branch_false: ...to here
    liburing-2.13/test/fixed-seg.c:129:18: acquire_resource: opened here
    liburing-2.13/test/fixed-seg.c:135:13: branch_true: following ‘true’ branch...
    liburing-2.13/test/fixed-seg.c:135:13: branch_true: ...to here
    liburing-2.13/test/fixed-seg.c:139:15: danger: ‘open("/dev/urandom", 0)’ could be invalid: unchecked value from [(7)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/6)
    #  137|   	wvec.iov_len = 512*1024;
    #  138|
    #  139|-> 	ret = read(rnd_fd, wvec.iov_base, wvec.iov_len);
    #  140|   	if (ret != wvec.iov_len) {
    #  141|   		fprintf(stderr, "Precondition, urandom read failed, ret: %d\n", ret);

    Error: CPPCHECK_WARNING (CWE-476): [#def73]
    liburing-2.13/test/futex-kill.c:41: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #   39|
    #   40|   	futex = malloc(sizeof(*futex));
    #   41|-> 	*futex = 0;
    #   42|   	fw.uaddr = (unsigned long) futex;
    #   43|   	fw.flags = FUTEX2_SIZE_U32|FUTEX2_PRIVATE;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def74]
    liburing-2.13/test/futex-kill.c:41:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘futex’
    liburing-2.13/test/futex-kill.c:79:5: enter_function: entry to ‘main’
    liburing-2.13/test/futex-kill.c:83:15: call_function: calling ‘test’ from ‘main’
    #   39|
    #   40|   	futex = malloc(sizeof(*futex));
    #   41|-> 	*futex = 0;
    #   42|   	fw.uaddr = (unsigned long) futex;
    #   43|   	fw.flags = FUTEX2_SIZE_U32|FUTEX2_PRIVATE;

    Error: CPPCHECK_WARNING (CWE-476): [#def75]
    liburing-2.13/test/futex.c:182: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  180|
    #  181|   	futex = malloc(sizeof(*futex));
    #  182|-> 	*futex = 0;
    #  183|
    #  184|   	fw.uaddr = (unsigned long) futex;

    Error: CPPCHECK_WARNING (CWE-476): [#def76]
    liburing-2.13/test/futex.c:211: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  209|   	 * Now submit wake for just one futex
    #  210|   	 */
    #  211|-> 	*futex = 1;
    #  212|   	sqe = io_uring_get_sqe(&ring);
    #  213|   	io_uring_prep_futex_wake(sqe, futex, 1, FUTEX_BITSET_MATCH_ANY,

    Error: CPPCHECK_WARNING (CWE-476): [#def77]
    liburing-2.13/test/futex.c:271: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  269|
    #  270|   	futex = malloc(sizeof(*futex));
    #  271|-> 	*futex = 0;
    #  272|
    #  273|   	fw.val = 0;

    Error: CPPCHECK_WARNING (CWE-476): [#def78]
    liburing-2.13/test/futex.c:302: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  300|   	 * Now submit wake for both futexes
    #  301|   	 */
    #  302|-> 	*futex = 1;
    #  303|   	sqe = io_uring_get_sqe(&ring);
    #  304|   	io_uring_prep_futex_wake(sqe, futex, 2, FUTEX_BITSET_MATCH_ANY,

    Error: CPPCHECK_WARNING (CWE-476): [#def79]
    liburing-2.13/test/futex.c:354: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  352|
    #  353|   	futex = malloc(sizeof(*futex));
    #  354|-> 	*futex = 0;
    #  355|
    #  356|   	sqe = io_uring_get_sqe(&ring);

    Error: CPPCHECK_WARNING (CWE-476): [#def80]
    liburing-2.13/test/futex.c:412: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: futex
    #  410|
    #  411|   	futex = malloc(sizeof(*futex));
    #  412|-> 	*futex = 0;
    #  413|
    #  414|   	sqe = io_uring_get_sqe(&ring);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def81]
    liburing-2.13/test/helpers.c:187:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor
    liburing-2.13/test/helpers.c:184:17: acquire_resource: socket created here
    liburing-2.13/test/helpers.c:185:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/helpers.c:187:17: branch_false: ...to here
    liburing-2.13/test/helpers.c:187:17: danger: leaks here
    #  185|   	if (fd[0] < 0)
    #  186|   		return errno;
    #  187|-> 	fd[1] = socket(AF_INET, type, 0);
    #  188|   	if (fd[1] < 0) {
    #  189|   		ret = errno;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def82]
    liburing-2.13/test/helpers.c:211:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*fd’
    liburing-2.13/test/helpers.c:185:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/helpers.c:187:17: branch_false: ...to here
    liburing-2.13/test/helpers.c:188:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/helpers.c:194:9: branch_false: ...to here
    liburing-2.13/test/helpers.c:195:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/helpers.c:198:9: branch_false: ...to here
    liburing-2.13/test/helpers.c:206:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/helpers.c:211:12: branch_false: ...to here
    liburing-2.13/test/helpers.c:211:12: branch_true: following ‘true’ branch (when ‘stream != 0’)...
    liburing-2.13/test/helpers.c:211:23: branch_true: ...to here
    liburing-2.13/test/helpers.c:211:23: danger: ‘*fd’ leaks here
    #  209|   	}
    #  210|
    #  211|-> 	if (stream && listen(fd[0], 16)) {
    #  212|   		fprintf(stderr, "listen failed\n");
    #  213|   		goto errno_cleanup;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def83]
    liburing-2.13/test/io-cancel.c:194:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/io-cancel.c:487:5: enter_function: entry to ‘main’
    liburing-2.13/test/io-cancel.c:492:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/io-cancel.c:495:13: branch_false: ...to here
    liburing-2.13/test/io-cancel.c:495:13: call_function: calling ‘test_dont_cancel_another_ring’ from ‘main’
    #  192|   	if (ret) {
    #  193|   		fprintf(stderr, "ring create failed: %d\n", ret);
    #  194|-> 		return 1;
    #  195|   	}
    #  196|   	ret = io_uring_queue_init(8, &ring2, 0);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def84]
    liburing-2.13/test/io-cancel.c:194:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/io-cancel.c:487:5: enter_function: entry to ‘main’
    liburing-2.13/test/io-cancel.c:492:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/io-cancel.c:495:13: branch_false: ...to here
    liburing-2.13/test/io-cancel.c:495:13: call_function: calling ‘test_dont_cancel_another_ring’ from ‘main’
    #  192|   	if (ret) {
    #  193|   		fprintf(stderr, "ring create failed: %d\n", ret);
    #  194|-> 		return 1;
    #  195|   	}
    #  196|   	ret = io_uring_queue_init(8, &ring2, 0);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def85]
    liburing-2.13/test/io_uring_register.c:178:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 2)’
    liburing-2.13/test/io_uring_register.c:480:5: enter_function: entry to ‘main’
    liburing-2.13/test/io_uring_register.c:487:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/io_uring_register.c:491:20: branch_false: ...to here
    liburing-2.13/test/io_uring_register.c:493:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
    liburing-2.13/test/io_uring_register.c:497:23: branch_false: ...to here
    liburing-2.13/test/io_uring_register.c:499:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/io_uring_register.c:505:19: branch_false: ...to here
    liburing-2.13/test/io_uring_register.c:511:14: call_function: calling ‘new_io_uring’ from ‘main’
    liburing-2.13/test/io_uring_register.c:511:14: return_function: returning to ‘main’ from ‘new_io_uring’
    liburing-2.13/test/io_uring_register.c:521:19: call_function: calling ‘test_iovec_size’ from ‘main’
    liburing-2.13/test/io_uring_register.c:521:19: return_function: returning to ‘main’ from ‘test_iovec_size’
    liburing-2.13/test/io_uring_register.c:524:19: call_function: calling ‘test_max_fds’ from ‘main’
    #  176|   	fds = mmap(fd_as, 128*1024*1024, PROT_READ|PROT_WRITE,
    #  177|   		   MAP_SHARED|MAP_FIXED, fdtable_fd, 0);
    #  178|-> 	if (fds == MAP_FAILED) {
    #  179|   		perror("mmap fdtable");
    #  180|   		exit(1);

    Error: COMPILER_WARNING: [#def86]
    liburing-2.13/test/io_uring_register.c:410:9: warning[-Wstringop-overflow=]: ‘memset’ writing 63 bytes into a region of size 0 overflows the destination
    #destination object is likely at address zero
    #  408|
    #  409|   	sqe = io_uring_get_sqe(ring);
    #  410|-> 	memset(sqe, 0, sizeof(*sqe));
    #  411|   	sqe->opcode = IORING_OP_POLL_ADD;
    #  412|   	if (fixed)

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def87]
    liburing-2.13/test/io_uring_register.c:411:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
    liburing-2.13/test/io_uring_register.c:403:12: enter_function: entry to ‘ioring_poll’
    liburing-2.13/test/io_uring_register.c:409:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘ioring_poll’
    liburing-2.13/test/io_uring_register.c:409:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘ioring_poll’
    liburing-2.13/test/io_uring_register.c:411:9: danger: dereference of NULL ‘_io_uring_get_sqe(ring)’
    #  409|   	sqe = io_uring_get_sqe(ring);
    #  410|   	memset(sqe, 0, sizeof(*sqe));
    #  411|-> 	sqe->opcode = IORING_OP_POLL_ADD;
    #  412|   	if (fixed)
    #  413|   		sqe->flags = IOSQE_FIXED_FILE;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def88]
    liburing-2.13/test/iowait.c:54:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/iowait.c:56:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/iowait.c:61:15: branch_false: ...to here
    liburing-2.13/test/iowait.c:62:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/iowait.c:63:17: branch_true: ...to here
    liburing-2.13/test/iowait.c:54:24: danger: ‘fds[0]’ leaks here
    #   52|
    #   53|   	if (!(ring->features & IORING_FEAT_NO_IOWAIT))
    #   54|-> 		return T_EXIT_SKIP;
    #   55|
    #   56|   	if (pipe(fds) < 0) {

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def89]
    liburing-2.13/test/iowait.c:54:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/iowait.c:56:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/iowait.c:61:15: branch_false: ...to here
    liburing-2.13/test/iowait.c:62:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/iowait.c:63:17: branch_true: ...to here
    liburing-2.13/test/iowait.c:54:24: danger: ‘fds[1]’ leaks here
    #   52|
    #   53|   	if (!(ring->features & IORING_FEAT_NO_IOWAIT))
    #   54|-> 		return T_EXIT_SKIP;
    #   55|
    #   56|   	if (pipe(fds) < 0) {

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def90]
    liburing-2.13/test/iowait.c:54:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[with_iowait]’
    liburing-2.13/test/iowait.c:106:5: enter_function: entry to ‘main’
    liburing-2.13/test/iowait.c:114:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/iowait.c:117:15: branch_false: ...to here
    liburing-2.13/test/iowait.c:118:12: branch_false: following ‘false’ branch (when ‘ret != 1’)...
    liburing-2.13/test/iowait.c:120:17: branch_false: ...to here
    liburing-2.13/test/iowait.c:120:17: branch_false: following ‘false’ branch (when ‘ret == 0’)...
    liburing-2.13/test/iowait.c:123:15: branch_false: ...to here
    liburing-2.13/test/iowait.c:123:15: call_function: calling ‘test’ from ‘main’
    #   52|
    #   53|   	if (!(ring->features & IORING_FEAT_NO_IOWAIT))
    #   54|-> 		return T_EXIT_SKIP;
    #   55|
    #   56|   	if (pipe(fds) < 0) {

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def91]
    liburing-2.13/test/lfs-openat-write.c:110:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/tmp", 65536)’
    liburing-2.13/test/lfs-openat-write.c:102:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/lfs-openat-write.c:105:15: branch_false: ...to here
    liburing-2.13/test/lfs-openat-write.c:105:15: acquire_resource: opened here
    liburing-2.13/test/lfs-openat-write.c:106:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat-write.c:109:15: branch_false: ...to here
    liburing-2.13/test/lfs-openat-write.c:110:12: danger: ‘open("/tmp", 65536)’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
    #  108|
    #  109|   	ret = io_uring_queue_init(RSIZE, &ring, 0);
    #  110|-> 	if (ret < 0)
    #  111|   		DIE("failed to init io_uring: %s\n", strerror(-ret));
    #  112|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def92]
    liburing-2.13/test/lfs-openat.c:93:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/lfs-openat.c:78:12: enter_function: entry to ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:88:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:91:13: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:91:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:96:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:96:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:97:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/lfs-openat.c:98:17: branch_true: ...to here
    liburing-2.13/test/lfs-openat.c:93:24: danger: ‘fds[0]’ leaks here
    #   91|   	if (pipe(fds)) {
    #   92|   		perror("pipe");
    #   93|-> 		return 1;
    #   94|   	}
    #   95|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def93]
    liburing-2.13/test/lfs-openat.c:93:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/lfs-openat.c:78:12: enter_function: entry to ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:88:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:91:13: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:91:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:96:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:96:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_linked_files’
    liburing-2.13/test/lfs-openat.c:97:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/lfs-openat.c:98:17: branch_true: ...to here
    liburing-2.13/test/lfs-openat.c:93:24: danger: ‘fds[1]’ leaks here
    #   91|   	if (pipe(fds)) {
    #   92|   		perror("pipe");
    #   93|-> 		return 1;
    #   94|   	}
    #   95|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def94]
    liburing-2.13/test/lfs-openat.c:146:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/lfs-openat.c:132:12: enter_function: entry to ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:141:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:144:13: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:144:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:149:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:149:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:150:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/lfs-openat.c:151:17: branch_true: ...to here
    liburing-2.13/test/lfs-openat.c:146:24: danger: ‘fds[0]’ leaks here
    #  144|   	if (pipe(fds)) {
    #  145|   		perror("pipe");
    #  146|-> 		return 1;
    #  147|   	}
    #  148|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def95]
    liburing-2.13/test/lfs-openat.c:146:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/lfs-openat.c:132:12: enter_function: entry to ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:141:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:144:13: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:144:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:149:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:149:15: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_drained_files’
    liburing-2.13/test/lfs-openat.c:150:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/lfs-openat.c:151:17: branch_true: ...to here
    liburing-2.13/test/lfs-openat.c:146:24: danger: ‘fds[1]’ leaks here
    #  144|   	if (pipe(fds)) {
    #  145|   		perror("pipe");
    #  146|-> 		return 1;
    #  147|   	}
    #  148|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def96]
    liburing-2.13/test/lfs-openat.c:227:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/tmp", 2097152)’
    liburing-2.13/test/lfs-openat.c:219:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/lfs-openat.c:222:15: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:222:15: acquire_resource: opened here
    liburing-2.13/test/lfs-openat.c:223:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/lfs-openat.c:226:15: branch_false: ...to here
    liburing-2.13/test/lfs-openat.c:227:12: danger: ‘open("/tmp", 2097152)’ leaks here; was opened at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
    #  225|
    #  226|   	ret = io_uring_queue_init(RSIZE, &ring, 0);
    #  227|-> 	if (ret < 0)
    #  228|   		DIE("failed to init io_uring: %s\n", strerror(-ret));
    #  229|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def97]
    liburing-2.13/test/link-timeout.c:685:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/link-timeout.c:1143:5: enter_function: entry to ‘main’
    liburing-2.13/test/link-timeout.c:1148:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/link-timeout.c:1151:15: branch_false: ...to here
    liburing-2.13/test/link-timeout.c:1152:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/link-timeout.c:1157:15: branch_false: ...to here
    liburing-2.13/test/link-timeout.c:1157:15: call_function: calling ‘test_timeout_link_chain1’ from ‘main’
    #  683|   	if (pipe(fds)) {
    #  684|   		perror("pipe");
    #  685|-> 		return 1;
    #  686|   	}
    #  687|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def98]
    liburing-2.13/test/link-timeout.c:685:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/link-timeout.c:1143:5: enter_function: entry to ‘main’
    liburing-2.13/test/link-timeout.c:1148:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/link-timeout.c:1151:15: branch_false: ...to here
    liburing-2.13/test/link-timeout.c:1152:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/link-timeout.c:1157:15: branch_false: ...to here
    liburing-2.13/test/link-timeout.c:1157:15: call_function: calling ‘test_timeout_link_chain1’ from ‘main’
    #  683|   	if (pipe(fds)) {
    #  684|   		perror("pipe");
    #  685|-> 		return 1;
    #  686|   	}
    #  687|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def99]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0][0]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[0][0]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def100]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0][1]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[0][1]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def101]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1][0]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[1][0]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def102]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1][1]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[1][1]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def103]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[2][0]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[2][0]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def104]
    liburing-2.13/test/min-timeout.c:83:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[2][1]’
    liburing-2.13/test/min-timeout.c:82:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:15: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:84:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:84:12: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/min-timeout.c:94:27: branch_false: ...to here
    liburing-2.13/test/min-timeout.c:89:21: branch_true: following ‘true’ branch (when ‘i != 8’)...
    liburing-2.13/test/min-timeout.c:90:26: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:90:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/min-timeout.c:91:25: branch_true: ...to here
    liburing-2.13/test/min-timeout.c:83:24: danger: ‘fds[2][1]’ leaks here
    #   81|   	ret = io_uring_queue_init_params(NPIPES, &ring, &p);
    #   82|   	if (ret == -EINVAL)
    #   83|-> 		return T_EXIT_SKIP;
    #   84|   	if (!(p.features & IORING_FEAT_MIN_TIMEOUT)) {
    #   85|   		no_min_timeout = 1;

    Error: CPPCHECK_WARNING (CWE-476): [#def105]
    liburing-2.13/test/mock_file.c:148: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf_src
    #  146|
    #  147|   	for (i = 0; i < size; i++)
    #  148|-> 		buf_src[i] = 'a' + (i % 26);
    #  149|
    #  150|   	buf_iovec[0].iov_base = buf_src;

    Error: CPPCHECK_WARNING (CWE-476): [#def106]
    liburing-2.13/test/mock_file.c:161: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf_dst
    #  159|   	}
    #  160|
    #  161|-> 	memset(buf_dst, 0, size);
    #  162|   	iov[0].iov_len = size;
    #  163|   	iov[0].iov_base = buf_src;

    Error: CPPCHECK_WARNING (CWE-401): [#def107]
    liburing-2.13/test/mock_file.c:309: error[memleak]: Memory leak: buffer
    #  307|   	if (ret) {
    #  308|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #  309|-> 		return 1;
    #  310|   	}
    #  311|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def108]
    liburing-2.13/test/msg-ring-fd.c:93:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/msg-ring-fd.c:309:5: enter_function: entry to ‘main’
    liburing-2.13/test/msg-ring-fd.c:313:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/msg-ring-fd.c:316:15: branch_false: ...to here
    liburing-2.13/test/msg-ring-fd.c:316:15: call_function: calling ‘test’ from ‘main’
    #   91|
    #   92|   	if (no_fd_pass)
    #   93|-> 		return 0;
    #   94|
    #   95|   	pthread_barrier_init(&d.barrier, NULL, 2);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def109]
    liburing-2.13/test/msg-ring-fd.c:168:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/msg-ring-fd.c:309:5: enter_function: entry to ‘main’
    liburing-2.13/test/msg-ring-fd.c:313:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/msg-ring-fd.c:316:15: branch_false: ...to here
    liburing-2.13/test/msg-ring-fd.c:316:15: call_function: calling ‘test’ from ‘main’
    #  166|
    #  167|   	if (no_fd_pass)
    #  168|-> 		return 0;
    #  169|
    #  170|   	fd = -1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def110]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[0][0]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[0][0]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def111]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[0][1]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[0][1]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def112]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1][0]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[1][0]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def113]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1][1]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[1][1]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def114]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[2][0]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[2][0]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def115]
    liburing-2.13/test/multicqes_drain.c:198:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[2][1]’
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:195:36: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:195:21: branch_true: following ‘true’ branch (when ‘i != 50’)...
    liburing-2.13/test/multicqes_drain.c:196:26: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:196:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:197:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:198:32: danger: ‘pipes[2][1]’ leaks here
    #  196|   		if (pipe(pipes[i]) != 0) {
    #  197|   			perror("pipe");
    #  198|-> 			return 1;
    #  199|   		}
    #  200|   	}

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def116]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/multicqes_drain.c:286:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:33: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:286:13: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:287:17: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:288:24: danger: ‘pipe1[0]’ leaks here
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def117]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/multicqes_drain.c:286:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:33: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:286:13: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:287:17: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:288:24: danger: ‘pipe1[1]’ leaks here
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def118]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[i]’
    liburing-2.13/test/multicqes_drain.c:370:12: enter_function: entry to ‘test’
    liburing-2.13/test/multicqes_drain.c:381:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:381:12: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:386:21: branch_true: following ‘true’ branch (when ‘i != 5’)...
    liburing-2.13/test/multicqes_drain.c:387:23: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:387:23: call_function: calling ‘test_simple_drain’ from ‘test’
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def119]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe2[0]’
    liburing-2.13/test/multicqes_drain.c:279:12: enter_function: entry to ‘test_simple_drain’
    liburing-2.13/test/multicqes_drain.c:286:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:33: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:286:13: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:13: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:291:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/test/multicqes_drain.c:292:26: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_simple_drain’
    liburing-2.13/test/multicqes_drain.c:293:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:294:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:288:24: danger: ‘pipe2[0]’ leaks here
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def120]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe2[1]’
    liburing-2.13/test/multicqes_drain.c:279:12: enter_function: entry to ‘test_simple_drain’
    liburing-2.13/test/multicqes_drain.c:286:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:33: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:286:13: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:286:13: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:291:21: branch_true: following ‘true’ branch (when ‘i != 2’)...
    liburing-2.13/test/multicqes_drain.c:292:26: call_function: inlined call to ‘io_uring_get_sqe’ from ‘test_simple_drain’
    liburing-2.13/test/multicqes_drain.c:293:20: branch_true: following ‘true’ branch...
    liburing-2.13/test/multicqes_drain.c:294:25: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:288:24: danger: ‘pipe2[1]’ leaks here
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def121]
    liburing-2.13/test/multicqes_drain.c:288:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe2[i]’
    liburing-2.13/test/multicqes_drain.c:370:12: enter_function: entry to ‘test’
    liburing-2.13/test/multicqes_drain.c:381:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/multicqes_drain.c:381:12: branch_false: ...to here
    liburing-2.13/test/multicqes_drain.c:386:21: branch_true: following ‘true’ branch (when ‘i != 5’)...
    liburing-2.13/test/multicqes_drain.c:387:23: branch_true: ...to here
    liburing-2.13/test/multicqes_drain.c:387:23: call_function: calling ‘test_simple_drain’ from ‘test’
    #  286|   	if (pipe(pipe1) != 0 || pipe(pipe2) != 0) {
    #  287|   		perror("pipe");
    #  288|-> 		return 1;
    #  289|   	}
    #  290|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def122]
    liburing-2.13/test/pipe-bug.c:40:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/pipe-bug.c:88:5: enter_function: entry to ‘main’
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: ...to here
    liburing-2.13/test/pipe-bug.c:95:21: branch_true: following ‘true’ branch (when ‘i != 10000’)...
    liburing-2.13/test/pipe-bug.c:96:21: branch_true: ...to here
    liburing-2.13/test/pipe-bug.c:96:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/pipe-bug.c:95:32: branch_false: ...to here
    liburing-2.13/test/pipe-bug.c:95:21: branch_true: following ‘true’ branch (when ‘i != 10000’)...
    liburing-2.13/test/pipe-bug.c:96:21: branch_true: ...to here
    liburing-2.13/test/pipe-bug.c:96:21: call_function: calling ‘pipe_bug’ from ‘main’
    #   38|   	if (ret == -ENOMEM) {
    #   39|   		usleep(1000);
    #   40|-> 		return 0;
    #   41|   	} else if (ret) {
    #   42|   		fprintf(stderr, "ring_init: %d\n", ret);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def123]
    liburing-2.13/test/pipe-bug.c:40:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/pipe-bug.c:88:5: enter_function: entry to ‘main’
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: ...to here
    liburing-2.13/test/pipe-bug.c:95:21: branch_true: following ‘true’ branch (when ‘i != 10000’)...
    liburing-2.13/test/pipe-bug.c:96:21: branch_true: ...to here
    liburing-2.13/test/pipe-bug.c:96:21: call_function: calling ‘pipe_bug’ from ‘main’
    #   38|   	if (ret == -ENOMEM) {
    #   39|   		usleep(1000);
    #   40|-> 		return 0;
    #   41|   	} else if (ret) {
    #   42|   		fprintf(stderr, "ring_init: %d\n", ret);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def124]
    liburing-2.13/test/pipe-bug.c:40:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[i]’
    liburing-2.13/test/pipe-bug.c:88:5: enter_function: entry to ‘main’
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/pipe-bug.c:92:12: branch_false: ...to here
    liburing-2.13/test/pipe-bug.c:95:21: branch_true: following ‘true’ branch (when ‘i != 10000’)...
    liburing-2.13/test/pipe-bug.c:96:21: branch_true: ...to here
    liburing-2.13/test/pipe-bug.c:96:21: call_function: calling ‘pipe_bug’ from ‘main’
    #   38|   	if (ret == -ENOMEM) {
    #   39|   		usleep(1000);
    #   40|-> 		return 0;
    #   41|   	} else if (ret) {
    #   42|   		fprintf(stderr, "ring_init: %d\n", ret);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def125]
    liburing-2.13/test/poll-cancel.c:41:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/poll-cancel.c:39:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-cancel.c:44:15: branch_false: ...to here
    liburing-2.13/test/poll-cancel.c:41:24: danger: ‘pipe1[0]’ leaks here
    #   39|   	if (pipe(pipe1) != 0) {
    #   40|   		perror("pipe");
    #   41|-> 		return 1;
    #   42|   	}
    #   43|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def126]
    liburing-2.13/test/poll-cancel.c:41:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/poll-cancel.c:39:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-cancel.c:44:15: branch_false: ...to here
    liburing-2.13/test/poll-cancel.c:41:24: danger: ‘pipe1[1]’ leaks here
    #   39|   	if (pipe(pipe1) != 0) {
    #   40|   		perror("pipe");
    #   41|-> 		return 1;
    #   42|   	}
    #   43|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def127]
    liburing-2.13/test/poll-mshot-overflow.c:151:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/poll-mshot-overflow.c:233:5: enter_function: entry to ‘main’
    liburing-2.13/test/poll-mshot-overflow.c:238:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/poll-mshot-overflow.c:241:25: branch_false: ...to here
    liburing-2.13/test/poll-mshot-overflow.c:242:15: call_function: calling ‘test_downgrade’ from ‘main’
    #  149|   	if (pipe(fds) != 0) {
    #  150|   		perror("pipe");
    #  151|-> 		return -1;
    #  152|   	}
    #  153|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def128]
    liburing-2.13/test/poll-mshot-overflow.c:151:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/poll-mshot-overflow.c:233:5: enter_function: entry to ‘main’
    liburing-2.13/test/poll-mshot-overflow.c:238:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/poll-mshot-overflow.c:241:25: branch_false: ...to here
    liburing-2.13/test/poll-mshot-overflow.c:242:15: call_function: calling ‘test_downgrade’ from ‘main’
    #  149|   	if (pipe(fds) != 0) {
    #  150|   		perror("pipe");
    #  151|-> 		return -1;
    #  152|   	}
    #  153|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def129]
    liburing-2.13/test/poll-v-poll.c:100:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/poll-v-poll.c:98:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:103:9: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:100:24: danger: ‘pipe1[1]’ leaks here
    #   98|   	if (pipe(pipe1) < 0) {
    #   99|   		perror("pipe");
    #  100|-> 		return 1;
    #  101|   	}
    #  102|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def130]
    liburing-2.13/test/poll-v-poll.c:139:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/poll-v-poll.c:137:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:142:9: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:139:24: danger: ‘pipe1[0]’ leaks here
    #  137|   	if (pipe(pipe1) < 0) {
    #  138|   		perror("pipe");
    #  139|-> 		return 1;
    #  140|   	}
    #  141|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def131]
    liburing-2.13/test/poll-v-poll.c:248:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/poll-v-poll.c:236:12: enter_function: entry to ‘do_test_epoll’
    liburing-2.13/test/poll-v-poll.c:246:12: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
    liburing-2.13/test/poll-v-poll.c:251:13: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:251:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:256:9: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:259:12: branch_false: following ‘false’ branch (when ‘iou_epoll_add != 0’)...
    liburing-2.13/test/poll-v-poll.c:265:23: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:265:23: call_function: calling ‘iou_epoll_ctl’ from ‘do_test_epoll’
    liburing-2.13/test/poll-v-poll.c:265:23: return_function: returning to ‘do_test_epoll’ from ‘iou_epoll_ctl’
    liburing-2.13/test/poll-v-poll.c:266:20: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:269:27: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:269:27: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:274:9: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:248:24: danger: ‘pipe1[0]’ leaks here
    #  246|   	if (fd < 0) {
    #  247|   		perror("epoll_create");
    #  248|-> 		return 1;
    #  249|   	}
    #  250|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def132]
    liburing-2.13/test/poll-v-poll.c:248:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/poll-v-poll.c:246:12: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
    liburing-2.13/test/poll-v-poll.c:251:13: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:251:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/poll-v-poll.c:256:9: branch_false: ...to here
    liburing-2.13/test/poll-v-poll.c:259:12: branch_true: following ‘true’ branch (when ‘iou_epoll_add == 0’)...
    liburing-2.13/test/poll-v-poll.c:260:21: branch_true: ...to here
    liburing-2.13/test/poll-v-poll.c:248:24: danger: ‘pipe1[1]’ leaks here
    #  246|   	if (fd < 0) {
    #  247|   		perror("epoll_create");
    #  248|-> 		return 1;
    #  249|   	}
    #  250|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def133]
    liburing-2.13/test/poll.c:45:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/poll.c:286:5: enter_function: entry to ‘main’
    liburing-2.13/test/poll.c:290:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/poll.c:293:15: branch_false: ...to here
    liburing-2.13/test/poll.c:293:15: call_function: calling ‘test_basic’ from ‘main’
    #   43|   	if (pipe(pipe1) != 0) {
    #   44|   		perror("pipe");
    #   45|-> 		return 1;
    #   46|   	}
    #   47|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def134]
    liburing-2.13/test/poll.c:45:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/poll.c:286:5: enter_function: entry to ‘main’
    liburing-2.13/test/poll.c:290:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/poll.c:293:15: branch_false: ...to here
    liburing-2.13/test/poll.c:293:15: call_function: calling ‘test_basic’ from ‘main’
    #   43|   	if (pipe(pipe1) != 0) {
    #   44|   		perror("pipe");
    #   45|-> 		return 1;
    #   46|   	}
    #   47|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def135]
    liburing-2.13/test/read-inc-file.c:86:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&fname, 0)’
    liburing-2.13/test/read-inc-file.c:60:5: enter_function: entry to ‘main’
    liburing-2.13/test/read-inc-file.c:72:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/read-inc-file.c:75:9: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:76:13: call_function: calling ‘create_test_file’ from ‘main’
    liburing-2.13/test/read-inc-file.c:76:13: return_function: returning to ‘main’ from ‘create_test_file’
    liburing-2.13/test/read-inc-file.c:76:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/read-inc-file.c:79:14: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:79:14: acquire_resource: opened here
    liburing-2.13/test/read-inc-file.c:80:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/read-inc-file.c:85:15: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:86:12: danger: ‘open(&fname, 0)’ leaks here; was opened at [(11)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/10)
    #   84|
    #   85|   	ret = io_uring_queue_init_params(64, &ring, &p);
    #   86|-> 	if (ret) {
    #   87|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #   88|   		goto err;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def136]
    liburing-2.13/test/read-inc-file.c:91:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&fname, 0)’
    liburing-2.13/test/read-inc-file.c:60:5: enter_function: entry to ‘main’
    liburing-2.13/test/read-inc-file.c:72:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/read-inc-file.c:75:9: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:76:13: call_function: calling ‘create_test_file’ from ‘main’
    liburing-2.13/test/read-inc-file.c:76:13: return_function: returning to ‘main’ from ‘create_test_file’
    liburing-2.13/test/read-inc-file.c:76:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/read-inc-file.c:79:14: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:79:14: acquire_resource: opened here
    liburing-2.13/test/read-inc-file.c:80:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/read-inc-file.c:85:15: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:86:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/read-inc-file.c:91:13: branch_false: ...to here
    liburing-2.13/test/read-inc-file.c:91:13: danger: ‘open(&fname, 0)’ leaks here; was opened at [(11)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/10)
    #   89|   	}
    #   90|
    #   91|-> 	if (posix_memalign((void **) &buf, 4096, 65536))
    #   92|   		goto err;
    #   93|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def137]
    liburing-2.13/test/read-mshot.c:286:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/read-mshot.c:497:5: enter_function: entry to ‘main’
    liburing-2.13/test/read-mshot.c:501:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/read-mshot.c:504:15: branch_false: ...to here
    liburing-2.13/test/read-mshot.c:504:15: call_function: calling ‘test’ from ‘main’
    #  284|   	if (ret) {
    #  285|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #  286|-> 		return 1;
    #  287|   	}
    #  288|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def138]
    liburing-2.13/test/read-mshot.c:286:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/read-mshot.c:497:5: enter_function: entry to ‘main’
    liburing-2.13/test/read-mshot.c:501:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/read-mshot.c:504:15: branch_false: ...to here
    liburing-2.13/test/read-mshot.c:504:15: call_function: calling ‘test’ from ‘main’
    #  284|   	if (ret) {
    #  285|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #  286|-> 		return 1;
    #  287|   	}
    #  288|

    Error: CPPCHECK_WARNING (CWE-476): [#def139]
    liburing-2.13/test/read-mshot.c:326: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: inc_index
    #  324|   	} else {
    #  325|   		inc_index = ptr[0] = malloc(NR_BUFS * BUF_SIZE);
    #  326|-> 		memset(inc_index, 0, NR_BUFS * BUF_SIZE);
    #  327|   		io_uring_buf_ring_add(br, ptr[0], NR_BUFS * BUF_SIZE, 1, BR_MASK, 0);
    #  328|   		io_uring_buf_ring_advance(br, 1);

    Error: CPPCHECK_WARNING (CWE-476): [#def140]
    liburing-2.13/test/recv-bundle-short-ooo.c:325: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: test_data
    #  323|   	uint8_t *test_data = malloc(ONE_MB);
    #  324|   	for (int i = 0; i < ONE_MB; i++)
    #  325|-> 		test_data[i] = i % 256;	/* Create repeating pattern */
    #  326|
    #  327|   	/* Send test data through the socket */

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def141]
    liburing-2.13/test/recv-bundle-short-ooo.c:325:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘test_data’
    liburing-2.13/test/recv-bundle-short-ooo.c:416:5: enter_function: entry to ‘main’
    liburing-2.13/test/recv-bundle-short-ooo.c:420:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/recv-bundle-short-ooo.c:423:15: branch_false: ...to here
    liburing-2.13/test/recv-bundle-short-ooo.c:423:15: call_function: calling ‘test_recv_multi_large_packet_isolate_ring’ from ‘main’
    #  323|   	uint8_t *test_data = malloc(ONE_MB);
    #  324|   	for (int i = 0; i < ONE_MB; i++)
    #  325|-> 		test_data[i] = i % 256;	/* Create repeating pattern */
    #  326|
    #  327|   	/* Send test data through the socket */

    Error: CPPCHECK_WARNING (CWE-476): [#def142]
    liburing-2.13/test/recv-inc-ooo.c:298: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: test_data
    #  296|   	uint8_t *test_data = malloc(total_bytes);
    #  297|   	for (int i = 0; i < total_bytes; i++)
    #  298|-> 		test_data[i] = i % 256;	/* Create repeating pattern */
    #  299|
    #  300|   	/* Send data in chunks to test buffer boundary handling, intentionally misaligned with buffer size */

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def143]
    liburing-2.13/test/recv-inc-ooo.c:298:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘test_data’
    liburing-2.13/test/recv-inc-ooo.c:377:5: enter_function: entry to ‘main’
    liburing-2.13/test/recv-inc-ooo.c:381:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/recv-inc-ooo.c:384:15: branch_false: ...to here
    liburing-2.13/test/recv-inc-ooo.c:384:15: call_function: calling ‘test_recv_incr’ from ‘main’
    #  296|   	uint8_t *test_data = malloc(total_bytes);
    #  297|   	for (int i = 0; i < total_bytes; i++)
    #  298|-> 		test_data[i] = i % 256;	/* Create repeating pattern */
    #  299|
    #  300|   	/* Send data in chunks to test buffer boundary handling, intentionally misaligned with buffer size */

    Error: CPPCHECK_WARNING (CWE-476): [#def144]
    liburing-2.13/test/recv-msgall-stream.c:278: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
    #  276|   	buf = malloc(MAX_MSG * sizeof(int));
    #  277|   	for (i = 0; i < MAX_MSG; i++)
    #  278|-> 		buf[i] = i;
    #  279|
    #  280|   	sockfd = socket(AF_INET, SOCK_STREAM | SOCK_CLOEXEC, IPPROTO_TCP);

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def145]
    liburing-2.13/test/recv-msgall-stream.c:278:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘buf’
    liburing-2.13/test/recv-msgall-stream.c:369:5: enter_function: entry to ‘main’
    liburing-2.13/test/recv-msgall-stream.c:373:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/recv-msgall-stream.c:376:15: branch_false: ...to here
    liburing-2.13/test/recv-msgall-stream.c:376:15: call_function: calling ‘test’ from ‘main’
    #  276|   	buf = malloc(MAX_MSG * sizeof(int));
    #  277|   	for (i = 0; i < MAX_MSG; i++)
    #  278|-> 		buf[i] = i;
    #  279|
    #  280|   	sockfd = socket(AF_INET, SOCK_STREAM | SOCK_CLOEXEC, IPPROTO_TCP);

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def146]
    liburing-2.13/test/recv-msgall-stream.c:339:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
    liburing-2.13/test/recv-msgall-stream.c:369:5: enter_function: entry to ‘main’
    liburing-2.13/test/recv-msgall-stream.c:373:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/recv-msgall-stream.c:376:15: branch_false: ...to here
    liburing-2.13/test/recv-msgall-stream.c:376:15: call_function: calling ‘test’ from ‘main’
    #  337|   	free(buf);
    #  338|   	return 1;
    #  339|-> }
    #  340|
    #  341|   static int test(int use_recvmsg, int use_sync)

    Error: CPPCHECK_WARNING (CWE-476): [#def147]
    liburing-2.13/test/recv-msgall.c:164: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
    #  162|   	buf = malloc(MAX_MSG * sizeof(int));
    #  163|   	for (i = 0; i < MAX_MSG; i++)
    #  164|-> 		buf[i] = i;
    #  165|
    #  166|   	memset(&saddr, 0, sizeof(saddr));

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def148]
    liburing-2.13/test/recv-msgall.c:164:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘buf’
    liburing-2.13/test/recv-msgall.c:225:12: enter_function: entry to ‘test’
    liburing-2.13/test/recv-msgall.c:236:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
    liburing-2.13/test/recv-msgall.c:241:9: branch_false: ...to here
    liburing-2.13/test/recv-msgall.c:242:9: call_function: calling ‘do_send’ from ‘test’
    #  162|   	buf = malloc(MAX_MSG * sizeof(int));
    #  163|   	for (i = 0; i < MAX_MSG; i++)
    #  164|-> 		buf[i] = i;
    #  165|
    #  166|   	memset(&saddr, 0, sizeof(saddr));

    Error: CPPCHECK_WARNING (CWE-476): [#def149]
    liburing-2.13/test/recv-mshot-fair.c:344: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
    #  342|
    #  343|   	buf = malloc(4096);
    #  344|-> 	memset(buf, 0xa5, 4096);
    #  345|
    #  346|   	saddr.sin_family = AF_INET;

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def150]
    liburing-2.13/test/recv-mshot-fair.c:344:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buf’ where non-null expected
    liburing-2.13/test/recv-mshot-fair.c:446:12: enter_function: entry to ‘run_tests’
    liburing-2.13/test/recv-mshot-fair.c:451:15: call_function: calling ‘test’ from ‘run_tests’
    #  342|
    #  343|   	buf = malloc(4096);
    #  344|-> 	memset(buf, 0xa5, 4096);
    #  345|
    #  346|   	saddr.sin_family = AF_INET;

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def151]
    liburing-2.13/test/recv-mshot-fair.c:386:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
    liburing-2.13/test/recv-mshot-fair.c:446:12: enter_function: entry to ‘run_tests’
    liburing-2.13/test/recv-mshot-fair.c:451:15: call_function: calling ‘test’ from ‘run_tests’
    #  384|   	free(buf);
    #  385|   	return 1;
    #  386|-> }
    #  387|
    #  388|   struct res {

    Error: CPPCHECK_WARNING (CWE-401): [#def152]
    liburing-2.13/test/regbuf-clone.c:37: error[memleak]: Memory leak: buf
    #   35|   	if (fd < 0) {
    #   36|   		perror("open");
    #   37|-> 		return;
    #   38|   	}
    #   39|

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def153]
    liburing-2.13/test/regbuf-clone.c:54:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
    liburing-2.13/test/regbuf-clone.c:624:5: enter_function: entry to ‘main’
    liburing-2.13/test/regbuf-clone.c:628:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/regbuf-clone.c:631:15: branch_false: ...to here
    liburing-2.13/test/regbuf-clone.c:632:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/regbuf-clone.c:637:15: branch_false: ...to here
    liburing-2.13/test/regbuf-clone.c:637:15: call_function: calling ‘test’ from ‘main’
    #   52|   	close(fd);
    #   53|   	free(buf);
    #   54|-> }
    #   55|
    #   56|   static int use_buf(struct io_uring *ring, void *addr, int index)

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def154]
    liburing-2.13/test/register-restrictions.c:34:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/register-restrictions.c:563:5: enter_function: entry to ‘main’
    liburing-2.13/test/register-restrictions.c:567:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/register-restrictions.c:570:15: branch_false: ...to here
    liburing-2.13/test/register-restrictions.c:570:15: call_function: calling ‘test_restrictions_sqe_op’ from ‘main’
    #   32|   	if (pipe(pipe1) != 0) {
    #   33|   		perror("pipe");
    #   34|-> 		return T_EXIT_FAIL;
    #   35|   	}
    #   36|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def155]
    liburing-2.13/test/register-restrictions.c:34:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/register-restrictions.c:563:5: enter_function: entry to ‘main’
    liburing-2.13/test/register-restrictions.c:567:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/register-restrictions.c:570:15: branch_false: ...to here
    liburing-2.13/test/register-restrictions.c:570:15: call_function: calling ‘test_restrictions_sqe_op’ from ‘main’
    #   32|   	if (pipe(pipe1) != 0) {
    #   33|   		perror("pipe");
    #   34|-> 		return T_EXIT_FAIL;
    #   35|   	}
    #   36|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def156]
    liburing-2.13/test/register-restrictions.c:450:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[0]’
    liburing-2.13/test/register-restrictions.c:448:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/register-restrictions.c:453:15: branch_false: ...to here
    liburing-2.13/test/register-restrictions.c:450:24: danger: ‘pipe1[0]’ leaks here
    #  448|   	if (pipe(pipe1) != 0) {
    #  449|   		perror("pipe");
    #  450|-> 		return T_EXIT_FAIL;
    #  451|   	}
    #  452|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def157]
    liburing-2.13/test/register-restrictions.c:450:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipe1[1]’
    liburing-2.13/test/register-restrictions.c:448:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/register-restrictions.c:453:15: branch_false: ...to here
    liburing-2.13/test/register-restrictions.c:450:24: danger: ‘pipe1[1]’ leaks here
    #  448|   	if (pipe(pipe1) != 0) {
    #  449|   		perror("pipe");
    #  450|-> 		return T_EXIT_FAIL;
    #  451|   	}
    #  452|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def158]
    liburing-2.13/test/ring-leak.c:165:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/ring-leak.c:163:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:167:15: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:168:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:172:13: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:172:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:176:15: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:165:24: danger: ‘fds[0]’ leaks here
    #  163|   	if (socketpair(AF_UNIX, SOCK_DGRAM, 0, sp) != 0) {
    #  164|   		perror("Failed to create Unix-domain socket pair\n");
    #  165|-> 		return 1;
    #  166|   	}
    #  167|   	ret = io_uring_queue_init(8, &ring, 0);

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def159]
    liburing-2.13/test/ring-leak.c:165:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/ring-leak.c:163:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:167:15: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:168:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:172:13: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:172:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak.c:176:15: branch_false: ...to here
    liburing-2.13/test/ring-leak.c:165:24: danger: ‘fds[1]’ leaks here
    #  163|   	if (socketpair(AF_UNIX, SOCK_DGRAM, 0, sp) != 0) {
    #  164|   		perror("Failed to create Unix-domain socket pair\n");
    #  165|-> 		return 1;
    #  166|   	}
    #  167|   	ret = io_uring_queue_init(8, &ring, 0);

    Error: GCC_ANALYZER_WARNING: [#def160]
    liburing-2.13/test/ring-leak2.c:115:13: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘sock_listen_fd’
    liburing-2.13/test/ring-leak2.c:111:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ring-leak2.c:115:13: branch_false: ...to here
    liburing-2.13/test/ring-leak2.c:115:13: danger: ‘sock_listen_fd’ could be invalid
    #  113|   		exit(1);
    #  114|   	}
    #  115|-> 	if (listen(sock_listen_fd, 1) < 0) {
    #  116|   		perror("Error listening on socket...\n");
    #  117|   		exit(1);

    Error: CPPCHECK_WARNING (CWE-457): [#def161]
    liburing-2.13/test/ring-query.c:42: error[uninitvar]: Uninitialized variable: &op
    #   40|   	struct io_uring_query_hdr hdr = {
    #   41|   		.query_op = IO_URING_QUERY_OPCODES,
    #   42|-> 		.query_data = uring_ptr_to_u64(&op),
    #   43|   		.size = sizeof(op),
    #   44|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def162]
    liburing-2.13/test/ring-query.c:82: error[uninitvar]: Uninitialized variable: &op
    #   80|   	struct io_uring_query_hdr invalid_hdr = {
    #   81|   		.query_op = -1U,
    #   82|-> 		.query_data = uring_ptr_to_u64(&op),
    #   83|   		.size = sizeof(struct io_uring_query_opcode),
    #   84|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def163]
    liburing-2.13/test/ring-query.c:125: error[uninitvar]: Uninitialized variable: &op3
    #  123|   	struct io_uring_query_hdr hdr3 = {
    #  124|   		.query_op = IO_URING_QUERY_OPCODES,
    #  125|-> 		.query_data = uring_ptr_to_u64(&op3),
    #  126|   		.size = sizeof(struct io_uring_query_opcode),
    #  127|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def164]
    liburing-2.13/test/ring-query.c:130: error[uninitvar]: Uninitialized variable: &op2
    #  128|   	struct io_uring_query_hdr hdr2 = {
    #  129|   		.query_op = IO_URING_QUERY_OPCODES,
    #  130|-> 		.query_data = uring_ptr_to_u64(&op2),
    #  131|   		.size = sizeof(struct io_uring_query_opcode),
    #  132|   		.next_entry = uring_ptr_to_u64(&hdr3),

    Error: CPPCHECK_WARNING (CWE-457): [#def165]
    liburing-2.13/test/ring-query.c:136: error[uninitvar]: Uninitialized variable: &op1
    #  134|   	struct io_uring_query_hdr hdr1 = {
    #  135|   		.query_op = IO_URING_QUERY_OPCODES,
    #  136|-> 		.query_data = uring_ptr_to_u64(&op1),
    #  137|   		.size = sizeof(struct io_uring_query_opcode),
    #  138|   		.next_entry = uring_ptr_to_u64(&hdr2),

    Error: CPPCHECK_WARNING (CWE-457): [#def166]
    liburing-2.13/test/ring-query.c:169: error[uninitvar]: Uninitialized variable: &op2
    #  167|   	struct io_uring_query_hdr hdr2 = {
    #  168|   		.query_op = IO_URING_QUERY_OPCODES,
    #  169|-> 		.query_data = uring_ptr_to_u64(&op2),
    #  170|   		.size = sizeof(struct io_uring_query_opcode),
    #  171|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def167]
    liburing-2.13/test/ring-query.c:174: error[uninitvar]: Uninitialized variable: &op1
    #  172|   	struct io_uring_query_hdr hdr1 = {
    #  173|   		.query_op = IO_URING_QUERY_OPCODES,
    #  174|-> 		.query_data = uring_ptr_to_u64(&op1),
    #  175|   		.size = sizeof(struct io_uring_query_opcode),
    #  176|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def168]
    liburing-2.13/test/ring-query.c:207: error[uninitvar]: Uninitialized variable: &op
    #  205|   	struct io_uring_query_hdr hdr = {
    #  206|   		.query_op = IO_URING_QUERY_OPCODES,
    #  207|-> 		.query_data = uring_ptr_to_u64(&op),
    #  208|   		.size = sizeof(op),
    #  209|   	};

    Error: CPPCHECK_WARNING (CWE-457): [#def169]
    liburing-2.13/test/ring-query.c:240: error[uninitvar]: Uninitialized variable: &op
    #  238|   	struct io_uring_query_hdr hdr = {
    #  239|   		.query_op = IO_URING_QUERY_OPCODES,
    #  240|-> 		.query_data = uring_ptr_to_u64(&op),
    #  241|   		.size = sizeof(op),
    #  242|   	};

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def170]
    liburing-2.13/test/ringbuf-status.c:97:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/ringbuf-status.c:95:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ringbuf-status.c:100:13: branch_false: ...to here
    liburing-2.13/test/ringbuf-status.c:100:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ringbuf-status.c:105:13: branch_false: ...to here
    liburing-2.13/test/ringbuf-status.c:97:24: danger: ‘fds[0]’ leaks here
    #   95|   	if (ret) {
    #   96|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #   97|-> 		return 1;
    #   98|   	}
    #   99|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def171]
    liburing-2.13/test/ringbuf-status.c:97:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/ringbuf-status.c:95:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ringbuf-status.c:100:13: branch_false: ...to here
    liburing-2.13/test/ringbuf-status.c:100:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/ringbuf-status.c:105:13: branch_false: ...to here
    liburing-2.13/test/ringbuf-status.c:97:24: danger: ‘fds[1]’ leaks here
    #   95|   	if (ret) {
    #   96|   		fprintf(stderr, "ring setup failed: %d\n", ret);
    #   97|-> 		return 1;
    #   98|   	}
    #   99|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def172]
    liburing-2.13/test/short-read.c:44:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(".short-read", 0)’
    liburing-2.13/test/short-read.c:26:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/short-read.c:29:24: branch_false: ...to here
    liburing-2.13/test/short-read.c:34:14: acquire_resource: opened here
    liburing-2.13/test/short-read.c:38:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/short-read.c:43:15: branch_false: ...to here
    liburing-2.13/test/short-read.c:44:12: danger: ‘open(".short-read", 0)’ leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
    #   42|
    #   43|   	ret = io_uring_queue_init(32, &ring, 0);
    #   44|-> 	if (ret) {
    #   45|   		fprintf(stderr, "queue init failed: %d\n", ret);
    #   46|   		return ret;

    Error: GCC_ANALYZER_WARNING: [#def173]
    liburing-2.13/test/shutdown.c:52:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘recv_s0’
    liburing-2.13/test/shutdown.c:35:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/shutdown.c:38:15: branch_false: ...to here
    liburing-2.13/test/shutdown.c:43:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/shutdown.c:44:15: branch_true: ...to here
    liburing-2.13/test/shutdown.c:45:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/shutdown.c:47:9: branch_true: ...to here
    liburing-2.13/test/shutdown.c:51:9: branch_true: following ‘true’ branch...
    liburing-2.13/test/shutdown.c:52:15: branch_true: ...to here
    liburing-2.13/test/shutdown.c:52:15: danger: ‘recv_s0’ could be invalid
    #   50|   	ret = t_bind_ephemeral_port(recv_s0, &addr);
    #   51|   	assert(!ret);
    #   52|-> 	ret = listen(recv_s0, 128);
    #   53|   	assert(ret != -1);
    #   54|

    Error: GCC_ANALYZER_WARNING: [#def174]
    liburing-2.13/test/socket-nb.c:45:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘recv_s0’
    liburing-2.13/test/socket-nb.c:115:5: enter_function: entry to ‘main’
    liburing-2.13/test/socket-nb.c:119:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/socket-nb.c:122:15: branch_false: ...to here
    liburing-2.13/test/socket-nb.c:122:15: call_function: calling ‘test’ from ‘main’
    #   43|   	ret = t_bind_ephemeral_port(recv_s0, &addr);
    #   44|   	assert(!ret);
    #   45|-> 	ret = listen(recv_s0, 128);
    #   46|   	assert(ret != -1);
    #   47|

    Error: GCC_ANALYZER_WARNING: [#def175]
    liburing-2.13/test/socket-rw-eagain.c:47:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘recv_s0’
    liburing-2.13/test/socket-rw-eagain.c:31:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/socket-rw-eagain.c:34:15: branch_false: ...to here
    liburing-2.13/test/socket-rw-eagain.c:39:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw-eagain.c:40:15: branch_true: ...to here
    liburing-2.13/test/socket-rw-eagain.c:41:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw-eagain.c:43:9: branch_true: ...to here
    liburing-2.13/test/socket-rw-eagain.c:46:9: branch_true: following ‘true’ branch...
    liburing-2.13/test/socket-rw-eagain.c:47:15: branch_true: ...to here
    liburing-2.13/test/socket-rw-eagain.c:47:15: danger: ‘recv_s0’ could be invalid
    #   45|   	ret = t_bind_ephemeral_port(recv_s0, &addr);
    #   46|   	assert(!ret);
    #   47|-> 	ret = listen(recv_s0, 128);
    #   48|   	assert(ret != -1);
    #   49|

    Error: GCC_ANALYZER_WARNING: [#def176]
    liburing-2.13/test/socket-rw-offset.c:49:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘recv_s0’
    liburing-2.13/test/socket-rw-offset.c:33:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/socket-rw-offset.c:36:15: branch_false: ...to here
    liburing-2.13/test/socket-rw-offset.c:41:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw-offset.c:42:15: branch_true: ...to here
    liburing-2.13/test/socket-rw-offset.c:43:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw-offset.c:45:9: branch_true: ...to here
    liburing-2.13/test/socket-rw-offset.c:48:9: branch_true: following ‘true’ branch...
    liburing-2.13/test/socket-rw-offset.c:49:15: branch_true: ...to here
    liburing-2.13/test/socket-rw-offset.c:49:15: danger: ‘recv_s0’ could be invalid
    #   47|   	ret = t_bind_ephemeral_port(recv_s0, &addr);
    #   48|   	assert(!ret);
    #   49|-> 	ret = listen(recv_s0, 128);
    #   50|   	assert(ret != -1);
    #   51|

    Error: GCC_ANALYZER_WARNING: [#def177]
    liburing-2.13/test/socket-rw.c:49:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘recv_s0’
    liburing-2.13/test/socket-rw.c:33:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/socket-rw.c:36:15: branch_false: ...to here
    liburing-2.13/test/socket-rw.c:41:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw.c:42:15: branch_true: ...to here
    liburing-2.13/test/socket-rw.c:43:9: branch_true: following ‘true’ branch (when ‘ret != -1’)...
    liburing-2.13/test/socket-rw.c:45:9: branch_true: ...to here
    liburing-2.13/test/socket-rw.c:48:9: branch_true: following ‘true’ branch...
    liburing-2.13/test/socket-rw.c:49:15: branch_true: ...to here
    liburing-2.13/test/socket-rw.c:49:15: danger: ‘recv_s0’ could be invalid
    #   47|   	ret = t_bind_ephemeral_port(recv_s0, &addr);
    #   48|   	assert(!ret);
    #   49|-> 	ret = listen(recv_s0, 128);
    #   50|   	assert(ret != -1);
    #   51|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def178]
    liburing-2.13/test/splice.c:111:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/urandom", 0)’
    liburing-2.13/test/splice.c:444:5: enter_function: entry to ‘main’
    liburing-2.13/test/splice.c:452:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/splice.c:455:15: branch_false: ...to here
    liburing-2.13/test/splice.c:456:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/splice.c:460:15: branch_false: ...to here
    liburing-2.13/test/splice.c:460:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/splice.c:465:15: branch_false: ...to here
    liburing-2.13/test/splice.c:465:15: call_function: calling ‘init_splice_ctx’ from ‘main’
    #  109|   		return 1;
    #  110|
    #  111|-> 	ret = read_buf(rnd_fd, ctx->buf_in, BUF_SIZE);
    #  112|   	if (ret != 0)
    #  113|   		return 1;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def179]
    liburing-2.13/test/sq-poll-share.c:99:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(fname, 16384)’
    liburing-2.13/test/sq-poll-share.c:91:14: acquire_resource: opened here
    liburing-2.13/test/sq-poll-share.c:92:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/sq-poll-share.c:99:22: branch_false: ...to here
    liburing-2.13/test/sq-poll-share.c:102:21: branch_true: following ‘true’ branch (when ‘i != 4’)...
    liburing-2.13/test/sq-poll-share.c:103:40: branch_true: ...to here
    liburing-2.13/test/sq-poll-share.c:106:20: branch_false: following ‘false’ branch (when ‘i == 0’)...
    liburing-2.13/test/sq-poll-share.c:110:23: branch_false: ...to here
    liburing-2.13/test/sq-poll-share.c:99:22: danger: ‘open(fname, 16384)’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
    #   97|   	}
    #   98|
    #   99|-> 	if (fname != argv[1])
    #  100|   		unlink(fname);
    #  101|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def180]
    liburing-2.13/test/submit-reuse.c:149:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(fname1, 0)’
    liburing-2.13/test/submit-reuse.c:193:5: enter_function: entry to ‘main’
    liburing-2.13/test/submit-reuse.c:197:21: branch_true: following ‘true’ branch (when ‘i != 4’)...
    liburing-2.13/test/submit-reuse.c:200:17: branch_true: ...to here
    liburing-2.13/test/submit-reuse.c:203:23: call_function: calling ‘test_reuse’ from ‘main’
    #  147|   	fd2 = open(".reuse.2", O_RDONLY);
    #  148|   	unlink(".reuse.2");
    #  149|-> 	if (fd2 < 0) {
    #  150|   		perror("open .reuse.2");
    #  151|   		goto err;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def181]
    liburing-2.13/test/tty-write-dpoll.c:39:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/ttyS0", 2050)’
    liburing-2.13/test/tty-write-dpoll.c:31:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/tty-write-dpoll.c:34:14: branch_false: ...to here
    liburing-2.13/test/tty-write-dpoll.c:34:14: acquire_resource: opened here
    liburing-2.13/test/tty-write-dpoll.c:35:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/tty-write-dpoll.c:38:15: branch_false: ...to here
    liburing-2.13/test/tty-write-dpoll.c:39:12: danger: ‘open("/dev/ttyS0", 2050)’ leaks here; was opened at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
    #   37|
    #   38|   	ret = t_create_ring(SQES, &ring, 0);
    #   39|-> 	if (ret == T_SETUP_SKIP)
    #   40|   		return 0;
    #   41|   	else if (ret < 0)

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def182]
    liburing-2.13/test/tty-write-dpoll.c:41:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/ttyS0", 2050)’
    liburing-2.13/test/tty-write-dpoll.c:31:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/tty-write-dpoll.c:34:14: branch_false: ...to here
    liburing-2.13/test/tty-write-dpoll.c:34:14: acquire_resource: opened here
    liburing-2.13/test/tty-write-dpoll.c:35:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/tty-write-dpoll.c:38:15: branch_false: ...to here
    liburing-2.13/test/tty-write-dpoll.c:39:12: branch_false: following ‘false’ branch (when ‘ret != 1’)...
    liburing-2.13/test/tty-write-dpoll.c:41:17: branch_false: ...to here
    liburing-2.13/test/tty-write-dpoll.c:41:17: danger: ‘open("/dev/ttyS0", 2050)’ leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
    #   39|   	if (ret == T_SETUP_SKIP)
    #   40|   		return 0;
    #   41|-> 	else if (ret < 0)
    #   42|   		return 1;
    #   43|

    Error: CPPCHECK_WARNING (CWE-664): [#def183]
    liburing-2.13/test/uring_cmd_ublk.c:163: error[va_end_missing]: va_list 'ap' was opened but not closed by va_end().
    #  161|   	va_start(ap, fmt);
    #  162|   	vfprintf(stderr, fmt, ap);
    #  163|-> }
    #  164|
    #  165|   static void ublk_dbg(int level, const char *fmt, ...)

    Error: GCC_ANALYZER_WARNING (CWE-404): [#def184]
    liburing-2.13/test/uring_cmd_ublk.c:163:1: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
    liburing-2.13/test/uring_cmd_ublk.c:1217:5: enter_function: entry to ‘main’
    liburing-2.13/test/uring_cmd_ublk.c:1224:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/uring_cmd_ublk.c:1227:15: branch_false: ...to here
    liburing-2.13/test/uring_cmd_ublk.c:1227:15: call_function: calling ‘ublk_ctrl_init’ from ‘main’
    #  161|   	va_start(ap, fmt);
    #  162|   	vfprintf(stderr, fmt, ap);
    #  163|-> }
    #  164|
    #  165|   static void ublk_dbg(int level, const char *fmt, ...)

    Error: CPPCHECK_WARNING (CWE-664): [#def185]
    liburing-2.13/test/uring_cmd_ublk.c:171: error[va_end_missing]: va_list 'ap' was opened but not closed by va_end().
    #  169|   		va_start(ap, fmt);
    #  170|   		vfprintf(stdout, fmt, ap);
    #  171|->         }
    #  172|   }
    #  173|

    Error: CPPCHECK_WARNING (CWE-476): [#def186]
    liburing-2.13/test/uring_cmd_ublk.c:356: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
    #  354|   	int ret;
    #  355|
    #  356|-> 	dev->ctrl_fd = open(CTRL_DEV, O_RDWR);
    #  357|   	if (dev->ctrl_fd < 0) {
    #  358|   		free(dev);

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def187]
    liburing-2.13/test/uring_cmd_ublk.c:356:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘dev’
    liburing-2.13/test/uring_cmd_ublk.c:1217:5: enter_function: entry to ‘main’
    liburing-2.13/test/uring_cmd_ublk.c:1224:12: branch_false: following ‘false’ branch (when ‘argc <= 1’)...
    liburing-2.13/test/uring_cmd_ublk.c:1227:15: branch_false: ...to here
    liburing-2.13/test/uring_cmd_ublk.c:1227:15: call_function: calling ‘ublk_ctrl_init’ from ‘main’
    #  354|   	int ret;
    #  355|
    #  356|-> 	dev->ctrl_fd = open(CTRL_DEV, O_RDWR);
    #  357|   	if (dev->ctrl_fd < 0) {
    #  358|   		free(dev);

    Error: CPPCHECK_WARNING (CWE-476): [#def188]
    liburing-2.13/test/uring_cmd_ublk.c:357: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
    #  355|
    #  356|   	dev->ctrl_fd = open(CTRL_DEV, O_RDWR);
    #  357|-> 	if (dev->ctrl_fd < 0) {
    #  358|   		free(dev);
    #  359|   		return NULL;

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def189]
    liburing-2.13/test/wakeup-hang.c:74:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[0]’
    liburing-2.13/test/wakeup-hang.c:68:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/wakeup-hang.c:71:15: branch_false: ...to here
    liburing-2.13/test/wakeup-hang.c:72:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/wakeup-hang.c:73:17: branch_true: ...to here
    liburing-2.13/test/wakeup-hang.c:74:24: danger: ‘fds[0]’ leaks here
    #   72|   	if (ret) {
    #   73|   		fprintf(stderr, "Unable to setup io_uring: %s\n", strerror(-ret));
    #   74|-> 		return 1;
    #   75|   	}
    #   76|

    Error: GCC_ANALYZER_WARNING (CWE-775): [#def190]
    liburing-2.13/test/wakeup-hang.c:74:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fds[1]’
    liburing-2.13/test/wakeup-hang.c:68:12: branch_false: following ‘false’ branch...
    liburing-2.13/test/wakeup-hang.c:71:15: branch_false: ...to here
    liburing-2.13/test/wakeup-hang.c:72:12: branch_true: following ‘true’ branch...
    liburing-2.13/test/wakeup-hang.c:73:17: branch_true: ...to here
    liburing-2.13/test/wakeup-hang.c:74:24: danger: ‘fds[1]’ leaks here
    #   72|   	if (ret) {
    #   73|   		fprintf(stderr, "Unable to setup io_uring: %s\n", strerror(-ret));
    #   74|-> 		return 1;
    #   75|   	}
    #   76|

## Scan Properties

analyzer-version-clippy | 1.97.1
analyzer-version-cppcheck | 2.21.1
analyzer-version-gcc | 16.1.1
analyzer-version-gcc-analyzer | 16.1.1
analyzer-version-shellcheck | 0.11.0
analyzer-version-unicontrol | 0.0.2
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code | 0
host | ip-172-16-1-193.us-west-2.compute.internal
known-false-positives | /usr/share/csmock/known-false-positives.js
known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-config | fedora-rawhide-x86_64
project-name | liburing-2.13-2.fc44
store-results-to | /tmp/tmp9p1w2fgm/liburing-2.13-2.fc44.tar.xz
time-created | 2026-08-03 17:59:50
time-finished | 2026-08-03 18:02:28
tool | csmock
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp9p1w2fgm/liburing-2.13-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp9p1w2fgm/liburing-2.13-2.fc44.src.rpm'
tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9