Error: GCC_ANALYZER_WARNING (CWE-457): [#def1] xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1857:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘decode.<U61e0>.<U60a0>.len’ xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1842:12: enter_function: entry to ‘nvmx_handle_vmptrst’ xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1851:10: call_function: calling ‘decode_vmx_inst’ from ‘nvmx_handle_vmptrst’ xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1851:10: return_function: returning to ‘nvmx_handle_vmptrst’ from ‘decode_vmx_inst’ xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1852:8: branch_false: following ‘false’ branch (when ‘rc == 0’)... xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1855:11: branch_false: ...to here xen-4.21.1/xen/arch/x86/hvm/vmx/vvmx.c:1857:10: danger: use of uninitialized value ‘decode.<U61e0>.<U60a0>.len’ here # 1855| gpa = nvcpu->nv_vvmcxaddr; # 1856| # 1857|-> rc = hvm_copy_to_guest_linear(decode.mem, &gpa, decode.len, 0, &pfinfo); # 1858| if ( rc == HVMTRANS_bad_linear_to_gfn ) # 1859| hvm_inject_page_fault(pfinfo.ec, pfinfo.linear); Error: GCC_ANALYZER_WARNING (CWE-476): [#def2] xen-4.21.1/xen/common/domctl.c:215:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:903:17: call_function: calling ‘vnuma_init’ from ‘do_domctl’ # 213| nr_vnodes = uinfo->nr_vnodes; # 214| # 215|-> if ( uinfo->nr_vcpus != d->max_vcpus || uinfo->pad != 0 ) # 216| return ERR_PTR(ret); # 217| Error: GCC_ANALYZER_WARNING (CWE-476): [#def3] xen-4.21.1/xen/common/domctl.c:589:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:588:12: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:589:23: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:589:23: danger: dereference of NULL ‘d’ # 587| ret = -EINVAL; # 588| if ( (d == current->domain) || /* no domain_pause() */ # 589|-> (vcpu >= d->max_vcpus) || ((v = d->vcpu[vcpu]) == NULL) ) # 590| break; # 591| Error: GCC_ANALYZER_WARNING (CWE-476): [#def4] xen-4.21.1/xen/common/domctl.c:685:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:684:12: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:685:22: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:685:22: danger: dereference of NULL ‘d’ # 683| ret = -EINVAL; # 684| if ( (d == current->domain) || /* no domain_pause() */ # 685|-> (max != d->max_vcpus) ) /* max_vcpus set up in createdomain */ # 686| break; # 687| Error: GCC_ANALYZER_WARNING (CWE-476): [#def5] xen-4.21.1/xen/common/domctl.c:768:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:768:40: danger: dereference of NULL ‘d’ # 766| # 767| ret = -EINVAL; # 768|-> if ( op->u.vcpucontext.vcpu >= d->max_vcpus || # 769| (v = d->vcpu[op->u.vcpucontext.vcpu]) == NULL || # 770| v == current ) /* no vcpu_pause() */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def6] xen-4.21.1/xen/common/domctl.c:817:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:817:40: danger: dereference of NULL ‘d’ # 815| # 816| ret = -EINVAL; # 817|-> if ( op->u.getvcpuinfo.vcpu >= d->max_vcpus ) # 818| break; # 819| Error: GCC_ANALYZER_WARNING (CWE-476): [#def7] xen-4.21.1/xen/common/domctl.c:846:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:846:9: danger: dereference of NULL ‘d’ # 844| * the meantime, while tot > max, all new allocations are disallowed. # 845| */ # 846|-> d->max_pages = min(new_max, (uint64_t)(typeof(d->max_pages))-1); # 847| nrspin_unlock(&d->page_alloc_lock); # 848| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def8] xen-4.21.1/xen/common/domctl.c:852:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:852:9: danger: dereference of NULL ‘d’ # 850| # 851| case XEN_DOMCTL_setdomainhandle: # 852|-> memcpy(d->handle, op->u.setdomainhandle.handle, # 853| sizeof(xen_domain_handle_t)); # 854| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def9] xen-4.21.1/xen/common/domctl.c:862:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:857:14: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:857:12: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:861:13: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:862:13: danger: dereference of NULL ‘d’ # 860| { # 861| domain_pause(d); # 862|-> d->debugger_attached = !!op->u.setdebugging.enable; # 863| domain_unpause(d); /* causes guest to latch new status */ # 864| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def10] xen-4.21.1/xen/common/domctl.c:872:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.21.1/xen/common/domctl.c:304:6: enter_function: entry to ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:311:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:314:10: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:314:8: branch_false: following ‘false’ branch... xen-4.21.1/xen/common/domctl.c:318:5: branch_false: ...to here xen-4.21.1/xen/common/domctl.c:566:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’ xen-4.21.1/xen/common/domctl.c:570:8: branch_true: following ‘true’ branch... xen-4.21.1/xen/common/domctl.c:578:14: branch_true: ...to here xen-4.21.1/xen/common/domctl.c:872:9: danger: dereference of NULL ‘d’ # 870| # 871| case XEN_DOMCTL_subscribe: # 872|-> d->suspend_evtchn = op->u.subscribe.port; # 873| break; # 874|
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-145.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | xen-4.21.1-1.fc44 |
| diffbase-store-results-to | /tmp/tmphy6o9t9w/xen-4.21.1-1.fc44.tar.xz |
| diffbase-time-created | 2026-08-03 21:39:09 |
| diffbase-time-finished | 2026-08-03 21:53:42 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmphy6o9t9w/xen-4.21.1-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmphy6o9t9w/xen-4.21.1-1.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-145.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | xen-4.21.1-10.fc45 |
| store-results-to | /tmp/tmpd_wov3ky/xen-4.21.1-10.fc45.tar.xz |
| time-created | 2026-08-03 21:54:18 |
| time-finished | 2026-08-03 22:07:47 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpd_wov3ky/xen-4.21.1-10.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpd_wov3ky/xen-4.21.1-10.fc45.src.rpm' |
| tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |