# lua-5.4.8-5.fc44 - findings not occurring in lua-5.4.8-5.fc44

## List of Findings

    Error: CPPCHECK_WARNING (CWE-758): [#def1]
    lua-5.4.8-build/lua-5.4.8/src/ldump.c:55: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
    #   53|   static void dumpByte (DumpState *D, int y) {
    #   54|     lu_byte x = (lu_byte)y;
    #   55|->   dumpVar(D, x);
    #   56|   }
    #   57|

    Error: CPPCHECK_WARNING (CWE-758): [#def2]
    lua-5.4.8-build/lua-5.4.8/src/ldump.c:83: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
    #   81|
    #   82|   static void dumpNumber (DumpState *D, lua_Number x) {
    #   83|->   dumpVar(D, x);
    #   84|   }
    #   85|

    Error: CPPCHECK_WARNING (CWE-758): [#def3]
    lua-5.4.8-build/lua-5.4.8/src/ldump.c:88: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
    #   86|
    #   87|   static void dumpInteger (DumpState *D, lua_Integer x) {
    #   88|->   dumpVar(D, x);
    #   89|   }
    #   90|

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:150:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1734:6: enter_function: entry to 'luaC_fullgc'
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1738:6: branch_true: following 'true' branch...
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1739:5: branch_true: ...to here
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1739:5: call_function: calling 'fullinc' from 'luaC_fullgc'
    #  148|   static void linkgclist_ (GCObject *o, GCObject **pnext, GCObject **list) {
    #  149|     lua_assert(!isgray(o));  /* cannot be in a gray list */
    #  150|->   *pnext = *list;
    #  151|     *list = o;
    #  152|     set2gray(o);  /* now it is */

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:667:13: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1734:6: enter_function: entry to 'luaC_fullgc'
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1738:6: branch_true: following 'true' branch...
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1739:5: branch_true: ...to here
    lua-5.4.8-build/lua-5.4.8/src/lgc.c:1739:5: call_function: calling 'fullinc' from 'luaC_fullgc'
    #  665|     GCObject *o = g->gray;
    #  666|     nw2black(o);
    #  667|->   g->gray = *getgclist(o);  /* remove from 'gray' list */
    #  668|     switch (o->tt) {
    #  669|       case LUA_VTABLE: return traversetable(g, gco2t(o));

    Error: CPPCHECK_WARNING (CWE-758): [#def6]
    lua-5.4.8-build/lua-5.4.8/src/lundump.c:95: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
    #   93|   static lua_Number loadNumber (LoadState *S) {
    #   94|     lua_Number x;
    #   95|->   loadVar(S, x);
    #   96|     return x;
    #   97|   }

    Error: CPPCHECK_WARNING (CWE-758): [#def7]
    lua-5.4.8-build/lua-5.4.8/src/lundump.c:102: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
    #  100|   static lua_Integer loadInteger (LoadState *S) {
    #  101|     lua_Integer x;
    #  102|->   loadVar(S, x);
    #  103|     return x;
    #  104|   }

## Scan Properties

analyzer-version-clippy | 1.97.1
analyzer-version-cppcheck | 2.21.1
analyzer-version-gcc | 16.1.1
analyzer-version-gcc-analyzer | 16.1.1
analyzer-version-shellcheck | 0.11.0
analyzer-version-unicontrol | 0.0.2
diffbase-analyzer-version-clippy | 1.97.1
diffbase-analyzer-version-cppcheck | 2.21.1
diffbase-analyzer-version-gcc | 16.1.1
diffbase-analyzer-version-gcc-analyzer | 16.1.1
diffbase-analyzer-version-shellcheck | 0.11.0
diffbase-analyzer-version-unicontrol | 0.0.2
diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code | 0
diffbase-host | ip-172-16-1-21.us-west-2.compute.internal
diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-config | fedora-rawhide-x86_64
diffbase-project-name | lua-5.4.8-5.fc44
diffbase-store-results-to | /tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.tar.xz
diffbase-time-created | 2026-08-03 18:18:27
diffbase-time-finished | 2026-08-03 18:20:42
diffbase-tool | csmock
diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.src.rpm'
diffbase-tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code | 0
host | ip-172-16-1-21.us-west-2.compute.internal
known-false-positives | /usr/share/csmock/known-false-positives.js
known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-config | fedora-rawhide-x86_64
project-name | lua-5.4.8-5.fc44
store-results-to | /tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.tar.xz
time-created | 2026-08-03 18:18:27
time-finished | 2026-08-03 18:20:42
tool | csmock
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpbq7kum_p/lua-5.4.8-5.fc44.src.rpm'
tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9