Error: GCC_ANALYZER_WARNING (CWE-401): [#def1] tomcat-native-2.0.15-src/native/src/sslcontext.c:1268:17: warning[-Wanalyzer-malloc-leak]: leak of 'p_data' tomcat-native-2.0.15-src/native/src/sslcontext.c:1225:8: branch_false: following 'false' branch (when 'protos' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1230:11: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1232:8: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1237:32: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1237:32: acquire_memory: allocated here tomcat-native-2.0.15-src/native/src/sslcontext.c:1238:8: branch_false: following 'false' branch (when 'p_data' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1238:8: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1243:17: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1244:35: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1248:13: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1252:24: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1253:16: branch_true: following 'true' branch (when 'p_data_size < p_data_len')... tomcat-native-2.0.15-src/native/src/sslcontext.c:1255:54: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1260:20: branch_false: following 'false' branch (when 'p_data_tmp' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1268:39: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1243:17: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1281:8: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1281:8: branch_false: following 'false' branch (when 'p_data' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1286:13: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1286:12: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1291:16: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1268:17: danger: 'p_data' leaks here; was allocated at [(5)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/4) # 1266| } # 1267| // Set position in buffer as realloc may have moved the buffer # 1268|-> p_data = p_data_tmp + (p_data_len - (1 + proto_chars_len)); # 1269| } # 1270| // Write the length of the protocol and then increment before memcpy the protocol itself. Error: GCC_ANALYZER_WARNING (CWE-401): [#def2] tomcat-native-2.0.15-src/native/src/sslcontext.c:1296:1: warning[-Wanalyzer-malloc-leak]: leak of 'p_data_tmp' tomcat-native-2.0.15-src/native/src/sslcontext.c:1225:8: branch_false: following 'false' branch (when 'protos' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1230:11: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1232:8: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1237:32: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1238:8: branch_false: following 'false' branch (when 'p_data' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1238:8: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1243:17: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1244:35: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1248:13: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1252:24: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1253:16: branch_true: following 'true' branch (when 'p_data_size < p_data_len')... tomcat-native-2.0.15-src/native/src/sslcontext.c:1255:54: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1260:20: branch_false: following 'false' branch (when 'p_data_tmp' is non-NULL)... tomcat-native-2.0.15-src/native/src/sslcontext.c:1268:39: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1243:17: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1244:35: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1248:13: branch_true: following 'true' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1252:24: branch_true: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1253:16: branch_false: following 'false' branch (when 'p_data_size >= p_data_len')... tomcat-native-2.0.15-src/native/src/sslcontext.c:1271:13: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1243:17: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1281:8: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1286:12: branch_false: following 'false' branch... tomcat-native-2.0.15-src/native/src/sslcontext.c:1291:16: branch_false: ...to here tomcat-native-2.0.15-src/native/src/sslcontext.c:1296:1: danger: 'p_data_tmp' leaks here; was allocated at [(13)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/12) # 1294| return 0; # 1295| } # 1296|-> } # 1297| # 1298| TCN_IMPLEMENT_CALL(void, SSLContext, setAlpnProtos)(TCN_STDARGS, jlong ctx, jobjectArray alpn_protos,
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-162.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | tomcat-native-2.0.14-1.fc44 |
| diffbase-store-results-to | /tmp/tmppbq2obih/tomcat-native-2.0.14-1.fc44.tar.xz |
| diffbase-time-created | 2026-08-03 21:12:54 |
| diffbase-time-finished | 2026-08-03 21:15:02 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmppbq2obih/tomcat-native-2.0.14-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmppbq2obih/tomcat-native-2.0.14-1.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-162.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | tomcat-native-2.0.15-1.fc45 |
| store-results-to | /tmp/tmpt8rcqsmo/tomcat-native-2.0.15-1.fc45.tar.xz |
| time-created | 2026-08-03 21:15:18 |
| time-finished | 2026-08-03 21:16:33 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpt8rcqsmo/tomcat-native-2.0.15-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpt8rcqsmo/tomcat-native-2.0.15-1.fc45.src.rpm' |
| tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |