make-4.4.1-12.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-835): [#def1]
make-4.4.1/src/file.c:111:14: warning[-Wanalyzer-infinite-loop]: infinite loop
#  109|       {
#  110|         name += 2;
#  111|->       while (ISDIRSEP (*name))
#  112|           /* Skip following slashes: ".//foo" is "foo", not "/foo".  */
#  113|           ++name;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
make-4.4.1/src/file.c:521:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dl’
make-4.4.1/src/file.c:480:6: branch_false: following ‘false’ branch (when ‘deps’ is non-NULL)...
make-4.4.1/src/file.c:485:6: branch_false: ...to here
make-4.4.1/src/file.c:485:6: branch_true: following ‘true’ branch (when ‘stem’ is non-NULL)...
make-4.4.1/src/file.c:485:6: branch_true: ...to here
make-4.4.1/src/file.c:490:14: branch_true: following ‘true’ branch (when ‘dp’ is non-NULL)...
make-4.4.1/src/file.c:493:23: branch_true: ...to here
make-4.4.1/src/file.c:497:14: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:504:19: branch_true: ...to here
make-4.4.1/src/file.c:504:18: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:506:19: branch_true: ...to here
make-4.4.1/src/file.c:515:18: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:518:22: branch_true: ...to here
make-4.4.1/src/file.c:518:22: branch_true: following ‘true’ branch (when ‘deps == dp’)...
make-4.4.1/src/file.c:519:26: branch_true: ...to here
make-4.4.1/src/file.c:490:14: branch_true: following ‘true’ branch (when ‘dp’ is non-NULL)...
make-4.4.1/src/file.c:493:23: branch_true: ...to here
make-4.4.1/src/file.c:497:14: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:504:19: branch_true: ...to here
make-4.4.1/src/file.c:504:18: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:506:19: branch_true: ...to here
make-4.4.1/src/file.c:515:18: branch_true: following ‘true’ branch...
make-4.4.1/src/file.c:518:22: branch_true: ...to here
make-4.4.1/src/file.c:521:26: danger: dereference of NULL ‘dl’
#  519|                       dp = deps = deps->next;
#  520|                     else
#  521|->                     dp = dl->next = dp->next;
#  522|                     free_dep (df);
#  523|                     continue;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def3]
make-4.4.1/src/function.c:2363:7: warning[-Wanalyzer-file-leak]: leak of FILE ‘<unknown>’
make-4.4.1/src/function.c:2328:6: branch_true: following ‘true’ branch...
make-4.4.1/src/function.c:2338:7: branch_true: ...to here
make-4.4.1/src/function.c:2347:10: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2350:13: branch_false: ...to here
make-4.4.1/src/function.c:2356:7: acquire_resource: opened here
make-4.4.1/src/function.c:2356:7: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2357:10: branch_false: ...to here
make-4.4.1/src/function.c:2357:10: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2363:7: branch_false: ...to here
make-4.4.1/src/function.c:2365:10: branch_true: following ‘true’ branch...
make-4.4.1/src/function.c:2367:22: branch_true: ...to here
make-4.4.1/src/function.c:2363:7: danger: ‘<unknown>’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 2361|            Another option would be to look up the directory we changed and reset
# 2362|            its counter to 0.  */
# 2363|->       ++command_count;
# 2364|   
# 2365|         if (argv[1])

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
make-4.4.1/src/function.c:2363:7: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
make-4.4.1/src/function.c:2328:6: branch_true: following ‘true’ branch...
make-4.4.1/src/function.c:2338:7: branch_true: ...to here
make-4.4.1/src/function.c:2347:10: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2350:13: branch_false: ...to here
make-4.4.1/src/function.c:2356:7: acquire_memory: allocated here
make-4.4.1/src/function.c:2356:7: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2357:10: branch_false: ...to here
make-4.4.1/src/function.c:2357:10: branch_false: following ‘false’ branch...
make-4.4.1/src/function.c:2363:7: branch_false: ...to here
make-4.4.1/src/function.c:2365:10: branch_true: following ‘true’ branch...
make-4.4.1/src/function.c:2367:22: branch_true: ...to here
make-4.4.1/src/function.c:2363:7: danger: ‘<unknown>’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
# 2361|            Another option would be to look up the directory we changed and reset
# 2362|            its counter to 0.  */
# 2363|->       ++command_count;
# 2364|   
# 2365|         if (argv[1])

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
make-4.4.1/src/implicit.c:218:20: warning[-Wanalyzer-null-argument]: use of NULL ‘filename’ where non-null expected
make-4.4.1/src/implicit.c:215:26: branch_true: following ‘true’ branch (when ‘archive != 0’)...
make-4.4.1/src/implicit.c:215:36: branch_true: ...to here
make-4.4.1/src/implicit.c:218:20: danger: argument 1 (‘filename’) NULL where non-null expected
#  216|   
#  217|     /* Length of FILENAME.  */
#  218|->   size_t namelen = strlen (filename);
#  219|   
#  220|     /* The last slash in FILENAME (or nil if there is none).  */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def6]
make-4.4.1/src/read.c:716:7: warning[-Wanalyzer-null-argument]: use of NULL ‘collapsed’ where non-null expected
make-4.4.1/src/read.c:570:1: enter_function: entry to ‘eval’
make-4.4.1/src/read.c:639:16: call_function: calling ‘readline’ from ‘eval’
make-4.4.1/src/read.c:639:16: return_function: returning to ‘eval’ from ‘readline’
make-4.4.1/src/read.c:642:10: branch_false: following ‘false’ branch...
make-4.4.1/src/read.c:645:7: branch_false: ...to here
make-4.4.1/src/read.c:709:10: branch_false: following ‘false’ branch...
make-4.4.1/src/read.c:716:7: branch_false: ...to here
make-4.4.1/src/read.c:716:7: danger: argument 1 (‘collapsed’) NULL where non-null expected
#  714|             collapsed = xmalloc (collapsed_length);
#  715|           }
#  716|->       strcpy (collapsed, line);
#  717|         /* Collapse continuation lines.  */
#  718|         collapse_continuations (collapsed);

Error: COMPILER_WARNING (CWE-704): [#def7]
make-4.4.1/src/read.c: scope_hint: In function ‘tilde_expand’
make-4.4.1/src/read.c:3136:23: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 3136 |       char *userend = strchr (name + 1, '/');
#      |                       ^~~~~~
# 3134|       {
# 3135|         struct passwd *pwent;
# 3136|->       char *userend = strchr (name + 1, '/');
# 3137|         if (userend != 0)
# 3138|           *userend = '\0';

Error: COMPILER_WARNING (CWE-704): [#def8]
make-4.4.1/src/read.c:3136:23: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 3134|       {
# 3135|         struct passwd *pwent;
# 3136|->       char *userend = strchr (name + 1, '/');
# 3137|         if (userend != 0)
# 3138|           *userend = '\0';

Error: CPPCHECK_WARNING (CWE-758): [#def9]
make-4.4.1/src/read.c:3505: warning[objectIndex]: The address of variable 'name' might be accessed at non-zero index.
# 3503|             {
# 3504|               /* Try to glob on MEMNAME within the archive.  */
# 3505|->             struct nameseq *found = ar_glob (nlist[i], memname, size);
# 3506|               if (! found)
# 3507|                 /* No matches.  Use MEMNAME as-is.  */

Error: CPPCHECK_WARNING (CWE-758): [#def10]
make-4.4.1/src/read.c:3508: warning[objectIndex]: The address of variable 'name' might be accessed at non-zero index.
# 3506|               if (! found)
# 3507|                 /* No matches.  Use MEMNAME as-is.  */
# 3508|->               NEWELT (concat (5, prefix, nlist[i], "(", memname, ")"));
# 3509|               else
# 3510|                 {

Error: CPPCHECK_WARNING (CWE-758): [#def11]
make-4.4.1/src/read.c:3535: warning[objectIndex]: The address of variable 'name' might be accessed at non-zero index.
# 3533|           else
# 3534|   #endif /* !NO_ARCHIVES */
# 3535|->           NEWELT (concat (2, prefix, nlist[i]));
# 3536|   
# 3537|         if (globme)

Scan Properties