Error: GCC_ANALYZER_WARNING (CWE-775): [#def1] osbuild-composer-181/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘parse_proc_stringlist’ osbuild-composer-181/vendor/github.com/containers/storage/pkg/unshare/unshare.c:156:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’ # 154| ret[i] = NULL; # 155| return ret; # 156|-> } # 157| # 158| /* Error: GCC_ANALYZER_WARNING (CWE-401): [#def2] osbuild-composer-181/vendor/github.com/containers/storage/pkg/unshare/unshare.c:156:1: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’ # 154| ret[i] = NULL; # 155| return ret; # 156|-> } # 157| # 158| /* Error: GCC_ANALYZER_WARNING (CWE-401): [#def3] osbuild-composer-181/vendor/github.com/containers/storage/pkg/unshare/unshare.c:156:1: warning[-Wanalyzer-malloc-leak]: leak of ‘new_buf’ # 154| ret[i] = NULL; # 155| return ret; # 156|-> } # 157| # 158| /* Error: COMPILER_WARNING (CWE-704): [#def4] osbuild-composer-181/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c: scope_hint: In function ‘sqlite3ShadowTableName’ osbuild-composer-181/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c:124684:9: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type #124682| char *zTail; /* Pointer to the last "_" in zName */ #124683| Table *pTab; /* Table that zName is a shadow of */ #124684|-> zTail = strrchr(zName, '_'); #124685| if( zTail==0 ) return 0; #124686| *zTail = 0; Error: CPPCHECK_WARNING (CWE-476): [#def5] osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go:77: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: c # 75| CK_C_GetFunctionList list; # 76| struct ctx *c = calloc(1, sizeof(struct ctx)); # 77|-> c->handle = dlopen(module, RTLD_LAZY); # 78| if (c->handle == NULL) { # 79| free(c); Error: GCC_ANALYZER_WARNING (CWE-476): [#def6] osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go: scope_hint: In function 'New' osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go:77:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'c' # 75| CK_C_GetFunctionList list; # 76| struct ctx *c = calloc(1, sizeof(struct ctx)); # 77|-> c->handle = dlopen(module, RTLD_LAZY); # 78| if (c->handle == NULL) { # 79| free(c); Error: GCC_ANALYZER_WARNING (CWE-476): [#def7] osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go: scope_hint: In function ‘New’ osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go:77:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘c’ # 75| CK_C_GetFunctionList list; # 76| struct ctx *c = calloc(1, sizeof(struct ctx)); # 77|-> c->handle = dlopen(module, RTLD_LAZY); # 78| if (c->handle == NULL) { # 79| free(c); Error: CPPCHECK_WARNING (CWE-476): [#def8] osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go:78: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: c # 76| struct ctx *c = calloc(1, sizeof(struct ctx)); # 77| c->handle = dlopen(module, RTLD_LAZY); # 78|-> if (c->handle == NULL) { # 79| free(c); # 80| return NULL; Error: CPPCHECK_WARNING (CWE-476): [#def9] osbuild-composer-181/vendor/github.com/miekg/pkcs11/pkcs11.go:82: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: c # 80| return NULL; # 81| } # 82|-> list = (CK_C_GetFunctionList) dlsym(c->handle, "C_GetFunctionList"); # 83| if (list == NULL) { # 84| free(c);
| analyzer-version-clippy | 1.98.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.2.1 |
| analyzer-version-gcc-analyzer | 16.2.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.98.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.2.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.2.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-35.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260813.215201.gc98a3c4.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | osbuild-composer-181-1.20260917153237934348.pr5250.9.g146f27254 |
| diffbase-store-results-to | /tmp/tmprsixen1h/osbuild-composer-181-1.20260917153237934348.pr5250.9.g146f27254.tar.xz |
| diffbase-time-created | 2026-09-17 15:57:24 |
| diffbase-time-finished | 2026-09-17 16:03:27 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '--root-override=fedora-rawhide-x86_64-4dea0fb2-d9d9-4281-803d-8e14c289ccb5' '-t' 'cppcheck,clippy,shellcheck,gcc,unicontrol' '-o' '/tmp/tmprsixen1h/osbuild-composer-181-1.20260917153237934348.pr5250.9.g146f27254.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmprsixen1h/osbuild-composer-181-1.20260917153237934348.pr5250.9.g146f27254.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.20260914.142338.gbd0b33d-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-35.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260813.215201.gc98a3c4.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | osbuild-composer-181-1.20260917090555216041.main.3.g7d8409e0b |
| store-results-to | /tmp/tmpje6xuuyq/osbuild-composer-181-1.20260917090555216041.main.3.g7d8409e0b.tar.xz |
| time-created | 2026-09-17 15:49:24 |
| time-finished | 2026-09-17 15:56:56 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '--root-override=fedora-rawhide-x86_64-8b94d02a-2898-4c3b-87c5-2c058cac4529' '-t' 'cppcheck,clippy,shellcheck,gcc,unicontrol' '-o' '/tmp/tmpje6xuuyq/osbuild-composer-181-1.20260917090555216041.main.3.g7d8409e0b.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpje6xuuyq/osbuild-composer-181-1.20260917090555216041.main.3.g7d8409e0b.src.rpm' |
| tool-version | csmock-3.8.7.20260914.142338.gbd0b33d-1.el9 |