Task #1345 - iptables-1.8.10-7.fc40/scan-results.err
back to task #1345download
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libarpt_mangle.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libebt_among.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libebt_ip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libebt_ip6.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libebt_stp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libip6t_icmp6.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libip6t_rt.c:60:7: warning[deadcode.DeadStores]: Although the value stored to 'err' is used in the enclosing expression, the value is never actually read from 'err'
# 58| int err;
# 59|
# 60|-> if ((err=inet_pton(AF_INET6, num, &ap)) == 1)
# 61| return ≈
# 62| #ifdef DEBUG
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libipt_icmp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_HMARK.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_LOG.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_NAT.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_NAT.c:440:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 438| if (r->flags & NF_NAT_RANGE_PERSISTENT) {
# 439| xt_xlate_add(xl, "%spersistent", sep);
# 440|-> sep = ",";
# 441| }
# 442| return 1;
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_SET.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_TCPOPTSTRIP.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_addrtype.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_bpf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_cluster.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_conntrack.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_conntrack.c:607:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 605| if (statemask & XT_CONNTRACK_STATE_DNAT) {
# 606| printf("%sDNAT", sep);
# 607|-> sep = ",";
# 608| }
# 609| }
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_conntrack.c:1127:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 1125| if (statemask & XT_CONNTRACK_STATE_UNTRACKED) {
# 1126| printf("%sUNTRACKED", sep);
# 1127|-> sep = ",";
# 1128| }
# 1129| }
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_conntrack.c:1175:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 1173| if (statemask & XT_CONNTRACK_STATE_UNTRACKED) {
# 1174| xt_xlate_add(xl, "%s%s", sep, "untracked");
# 1175|-> sep = ",";
# 1176| }
# 1177| }
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_conntrack.c:1212:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 1210| if (statusmask & IPS_CONFIRMED) {
# 1211| xt_xlate_add(xl, "%s%s", sep, "confirmed");
# 1212|-> sep = ",";
# 1213| }
# 1214| }
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_dccp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_iprange.c:60:19: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'ia6')
# 58| xtables_param_act(XTF_BAD_VALUE, "iprange",
# 59| optname, spec[i]);
# 60|-> range[i].in6 = *ia6;
# 61| }
# 62| } else {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_iprange.c:68:18: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'ia4')
# 66| xtables_param_act(XTF_BAD_VALUE, "iprange",
# 67| optname, spec[i]);
# 68|-> range[i].in = *ia4;
# 69| }
# 70| }
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_ipvs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_policy.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_recent.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_sctp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_set.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_string.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_time.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/extensions/libxt_u32.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476):
iptables-1.8.10-build/iptables-1.8.10/include/linux/netfilter_ipv4/ip_tables.h:221:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fw’
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c: scope_hint: In function ‘print_firewall_line’
# 219| ipt_get_target(struct ipt_entry *e)
# 220| {
# 221|-> return (void *)e + e->target_offset;
# 222| }
# 223|
Error: GCC_ANALYZER_WARNING (CWE-476):
iptables-1.8.10-build/iptables-1.8.10/include/linux/netfilter_ipv6/ip6_tables.h:261:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fw’
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c: scope_hint: In function ‘print_firewall_line’
# 259| ip6t_get_target(struct ip6t_entry *e)
# 260| {
# 261|-> return (void *)e + e->target_offset;
# 262| }
# 263|
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c:222:16: warning[core.NullDereference]: Dereference of null pointer
# 220|
# 221| for (i = 0; i < nsaddrs; i++) {
# 222|-> fw->ipv6.src = saddrs[i];
# 223| fw->ipv6.smsk = smasks[i];
# 224| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c:245:15: warning[core.NullDereference]: Dereference of null pointer
# 243| struct xtc_handle *handle)
# 244| {
# 245|-> fw->ipv6.src = *saddr;
# 246| fw->ipv6.dst = *daddr;
# 247| fw->ipv6.smsk = *smask;
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c:272:16: warning[core.NullDereference]: Dereference of null pointer
# 270|
# 271| for (i = 0; i < nsaddrs; i++) {
# 272|-> fw->ipv6.src = saddrs[i];
# 273| fw->ipv6.smsk = smasks[i];
# 274| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c:306:16: warning[core.NullDereference]: Dereference of null pointer
# 304| mask = make_delete_mask(matches, target, sizeof(*fw));
# 305| for (i = 0; i < nsaddrs; i++) {
# 306|-> fw->ipv6.src = saddrs[i];
# 307| fw->ipv6.smsk = smasks[i];
# 308| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/ip6tables.c:336:16: warning[core.NullDereference]: Dereference of null pointer
# 334| mask = make_delete_mask(matches, target, sizeof(*fw));
# 335| for (i = 0; i < nsaddrs; i++) {
# 336|-> fw->ipv6.src = saddrs[i];
# 337| fw->ipv6.smsk = smasks[i];
# 338| for (j = 0; j < ndaddrs; j++) {
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-restore.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-775):
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c: scope_hint: In function ‘for_each_table’
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c:62:20: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(*afinfo.proc_exists, "re")’
# 60|
# 61| while (fgets(tablename, sizeof(tablename), procfile)) {
# 62|-> if (tablename[strlen(tablename) - 1] != '\n')
# 63| xtables_error(OTHER_PROBLEM,
# 64| "Badly formed tablename `%s'", tablename);
Error: GCC_ANALYZER_WARNING (CWE-401):
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c:62:20: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(*afinfo.proc_exists, "re")’
# 60|
# 61| while (fgets(tablename, sizeof(tablename), procfile)) {
# 62|-> if (tablename[strlen(tablename) - 1] != '\n')
# 63| xtables_error(OTHER_PROBLEM,
# 64| "Badly formed tablename `%s'", tablename);
Error: GCC_ANALYZER_WARNING (CWE-775):
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c: scope_hint: In function ‘do_iptables_save’
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c:164:28: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(optarg, "w")’
# 162| }
# 163| ret = dup2(fileno(file), STDOUT_FILENO);
# 164|-> if (ret == -1) {
# 165| fprintf(stderr, "Failed to redirect stdout, error: %s\n",
# 166| strerror(errno));
Error: GCC_ANALYZER_WARNING (CWE-401):
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-save.c:164:28: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(optarg, "w")’
# 162| }
# 163| ret = dup2(fileno(file), STDOUT_FILENO);
# 164|-> if (ret == -1) {
# 165| fprintf(stderr, "Failed to redirect stdout, error: %s\n",
# 166| strerror(errno));
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables-xml.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c:221:21: warning[core.NullDereference]: Dereference of null pointer
# 219|
# 220| for (i = 0; i < nsaddrs; i++) {
# 221|-> fw->ip.src.s_addr = saddrs[i].s_addr;
# 222| fw->ip.smsk.s_addr = smasks[i].s_addr;
# 223| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c:244:20: warning[core.NullDereference]: Dereference of null pointer
# 242| struct xtc_handle *handle)
# 243| {
# 244|-> fw->ip.src.s_addr = saddr->s_addr;
# 245| fw->ip.dst.s_addr = daddr->s_addr;
# 246| fw->ip.smsk.s_addr = smask->s_addr;
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c:271:21: warning[core.NullDereference]: Dereference of null pointer
# 269|
# 270| for (i = 0; i < nsaddrs; i++) {
# 271|-> fw->ip.src.s_addr = saddrs[i].s_addr;
# 272| fw->ip.smsk.s_addr = smasks[i].s_addr;
# 273| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c:305:21: warning[core.NullDereference]: Dereference of null pointer
# 303| mask = make_delete_mask(matches, target, sizeof(*fw));
# 304| for (i = 0; i < nsaddrs; i++) {
# 305|-> fw->ip.src.s_addr = saddrs[i].s_addr;
# 306| fw->ip.smsk.s_addr = smasks[i].s_addr;
# 307| for (j = 0; j < ndaddrs; j++) {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/iptables.c:335:21: warning[core.NullDereference]: Dereference of null pointer
# 333| mask = make_delete_mask(matches, target, sizeof(*fw));
# 334| for (i = 0; i < nsaddrs; i++) {
# 335|-> fw->ip.src.s_addr = saddrs[i].s_addr;
# 336| fw->ip.smsk.s_addr = smasks[i].s_addr;
# 337| for (j = 0; j < ndaddrs; j++) {
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-arp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-arp.c:327:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 325| if (fw->arp.arpro_mask != 65535)
# 326| printf("/%x", ntohs(fw->arp.arpro_mask));
# 327|-> sep = " ";
# 328| }
# 329| }
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-bridge.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-cache.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse-arp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse-bridge.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476):
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse.c: scope_hint: In function ‘nft_parse_range’
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse.c:870:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-ruleparse.c:30: included_from: Included from here.
# 868| sreg = nft_xt_ctx_get_sreg(ctx, reg);
# 869|
# 870|-> switch (sreg->type) {
# 871| case NFT_XT_REG_UNDEF:
# 872| ctx->errmsg = "range sreg undef";
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft-shared.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING (CWE-457):
iptables-1.8.10-build/iptables-1.8.10/iptables/nft.c:251: error[uninitvar]: Uninitialized variable: nlh->nlmsg_seq
# 249| if (ret == -1) {
# 250| mnl_err_list_node_add(&h->err_list, errno,
# 251|-> nlh->nlmsg_seq);
# 252| err = -1;
# 253| }
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/nft.c:3266:3: warning[unix.Malloc]: Use of memory after it is freed
# 3264|
# 3265| list_for_each_entry_safe(n, tmp, &h->obj_list, head) {
# 3266|-> list_for_each_entry_safe(err, ne, &h->err_list, head) {
# 3267| if (err->seqnum > n->seq)
# 3268| break;
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb-translate.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb-translate.c:404:8: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 402|
# 403| cs.eb.bitmask &= ~((unsigned int)EBT_NOPROTO);
# 404|-> i = strtol(optarg, &buffer, 16);
# 405| if (*buffer == '\0' && (i < 0 || i > 0xFFFF))
# 406| xtables_error(PARAMETER_PROBLEM,
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb.c:84:6: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 82| static void ebt_assert_valid_chain_name(const char *chainname)
# 83| {
# 84|-> if (strlen(chainname) >= EBT_CHAIN_MAXNAMELEN)
# 85| xtables_error(PARAMETER_PROBLEM,
# 86| "Chain name length can't exceed %d",
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb.c:818:10: warning[deadcode.DeadStores]: Although the value stored to 'chcounter' is used in the enclosing expression, the value is never actually read from 'chcounter'
# 816| optind++;
# 817| } else if (c == 'C') {
# 818|-> if ((chcounter = parse_change_counters_rule(argc, argv, &rule_nr, &rule_nr_end, &cs)) == -1)
# 819| return -1;
# 820| } else if (c == 'I') {
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-eb.c:1037:8: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 1035|
# 1036| cs.eb.bitmask &= ~((unsigned int)EBT_NOPROTO);
# 1037|-> i = strtol(optarg, &buffer, 16);
# 1038| if (*buffer == '\0' && (i < 0 || i > 0xFFFF))
# 1039| xtables_error(PARAMETER_PROBLEM,
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-monitor.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-restore.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-775):
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-save.c: scope_hint: In function ‘xtables_save_main’
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-save.c:176:28: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(optarg, "w")’
# 174| }
# 175| ret = dup2(fileno(file), STDOUT_FILENO);
# 176|-> if (ret == -1) {
# 177| fprintf(stderr, "Failed to redirect stdout, error: %s\n",
# 178| strerror(errno));
Error: GCC_ANALYZER_WARNING (CWE-401):
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-save.c:176:28: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(optarg, "w")’
# 174| }
# 175| ret = dup2(fileno(file), STDOUT_FILENO);
# 176|-> if (ret == -1) {
# 177| fprintf(stderr, "Failed to redirect stdout, error: %s\n",
# 178| strerror(errno));
Error: GCC_ANALYZER_WARNING (CWE-775):
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-save.c:229:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘ret’
# 227| default:
# 228| fprintf(stderr, "Unknown family %d\n", family);
# 229|-> return 1;
# 230| }
# 231|
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-translate.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
iptables-1.8.10-build/iptables-1.8.10/iptables/xtables-translate.c:263:6: warning[core.NullDereference]: Access to field 'init_cs' results in a dereference of a null pointer (loaded from field 'ops')
# 261| };
# 262|
# 263|-> if (h->ops->init_cs)
# 264| h->ops->init_cs(&cs);
# 265|
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/libiptc/libip4tc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/libiptc/libip6tc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-688):
iptables-1.8.10-build/iptables-1.8.10/libiptc/libip4tc.c:113: included_from: Included from here.
iptables-1.8.10-build/iptables-1.8.10/libiptc/libiptc.c: scope_hint: In function 'iptcc_chain_index_alloc'
iptables-1.8.10-build/iptables-1.8.10/libiptc/libiptc.c:499:9: warning[-Wanalyzer-null-argument]: use of NULL '*h.chain_index' where non-null expected
iptables-1.8.10-build/iptables-1.8.10/libiptc/libiptc.c:2226:1: note: in expansion of macro 'TC_CREATE_CHAIN'
iptables-1.8.10-build/iptables-1.8.10/libiptc/libiptc.c:40: included_from: Included from here.
iptables-1.8.10-build/iptables-1.8.10/libiptc/linux_list.h:16:56: note: in definition of macro 'container_of'
iptables-1.8.10-build/iptables-1.8.10/libiptc/linux_list.h:381:20: note: in expansion of macro 'list_entry'
iptables-1.8.10-build/iptables-1.8.10/libiptc/libiptc.c:867:17: note: in expansion of macro 'list_for_each_entry'
<built-in>: note: argument 1 of '__builtin_memset' must be non-null
# 497| return -ENOMEM;
# 498| }
# 499|-> memset(h->chain_index, 0, array_mem);
# 500| h->chain_index_sz = array_elems;
# 501|
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/libxtables/xtables.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING (CWE-457):
iptables-1.8.10-build/iptables-1.8.10/libxtables/xtables.c:287: warning[uninitvar]: Uninitialized variable: cur
# 285| hlist_for_each_entry_safe(cur, pos, n, ¬argets[i], node) {
# 286| hlist_del(&cur->node);
# 287|-> free(cur);
# 288| }
# 289| }
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/libxtables/xtoptions.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476):
iptables-1.8.10-build/iptables-1.8.10/libxtables/xtoptions.c: scope_hint: In function 'xtopt_parse_hostmask'
iptables-1.8.10-build/iptables-1.8.10/libxtables/xtoptions.c:753:14: warning[-Wanalyzer-null-dereference]: dereference of NULL 'p'
# 751| work = xtables_strdup(orig_arg);
# 752| p = strchr(work, '/'); /* by def this can't be NULL now */
# 753|-> *p++ = '\0';
# 754| /*
# 755| * Because xtopt_parse_host and xtopt_parse_plenmask would store
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/utils/nfbpf_compile.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
iptables-1.8.10-build/iptables-1.8.10/utils/nfnl_osf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.