Task #16 - added.js
back to task #16download
{
"scan": {
"analyzer-version-clang": "18.1.3",
"analyzer-version-cppcheck": "2.13.0",
"analyzer-version-gcc": "14.0.1",
"analyzer-version-gcc-analyzer": "14.0.1",
"analyzer-version-shellcheck": "0.10.0",
"diffbase-analyzer-version-clang": "18.1.3",
"diffbase-analyzer-version-cppcheck": "2.13.0",
"diffbase-analyzer-version-gcc": "14.0.1",
"diffbase-analyzer-version-gcc-analyzer": "14.0.1",
"diffbase-analyzer-version-shellcheck": "0.10.0",
"diffbase-enabled-plugins": "clang, cppcheck, gcc, shellcheck",
"diffbase-exit-code": 0,
"diffbase-host": "ip-172-16-1-187.us-west-2.compute.internal",
"diffbase-mock-config": "fedora-41-x86_64",
"diffbase-project-name": "bluez-5.73-3.fc40",
"diffbase-store-results-to": "/tmp/tmpdgbvdw7a/bluez-5.73-3.fc40.tar.xz",
"diffbase-time-created": "2024-04-22 10:43:57",
"diffbase-time-finished": "2024-04-22 10:50:04",
"diffbase-tool": "csmock",
"diffbase-tool-args": "'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpdgbvdw7a/bluez-5.73-3.fc40.tar.xz' '--gcc-analyze' '/tmp/tmpdgbvdw7a/bluez-5.73-3.fc40.src.rpm'",
"diffbase-tool-version": "csmock-3.5.3-1.el9",
"enabled-plugins": "clang, cppcheck, gcc, shellcheck",
"exit-code": 0,
"host": "ip-172-16-1-187.us-west-2.compute.internal",
"mock-config": "fedora-41-x86_64",
"project-name": "bluez-5.75-1.fc41",
"store-results-to": "/tmp/tmpm8gqi9gz/bluez-5.75-1.fc41.tar.xz",
"time-created": "2024-04-22 10:50:29",
"time-finished": "2024-04-22 10:56:17",
"tool": "csmock",
"tool-args": "'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpm8gqi9gz/bluez-5.75-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpm8gqi9gz/bluez-5.75-1.fc41.src.rpm'",
"tool-version": "csmock-3.5.3-1.el9",
"title": "Newly introduced defects"
},
"defects": [
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 126,
"language": "c/c++",
"tool": "gcc-analyzer",
"key_event_idx": 1,
"events": [
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 0,
"event": "scope_hint",
"message": "In function \u2018queue_command\u2019",
"verbosity_level": 1
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 52,
"event": "warning[-Wanalyzer-out-of-bounds]",
"message": "stack-based buffer over-read",
"verbosity_level": 0
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 3286,
"column": 13,
"event": "note",
"message": "(1) entry to \u2018set_pa_data\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 3317,
"column": 9,
"event": "note",
"message": "(2) calling \u2018send_command\u2019 from \u2018set_pa_data\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 883,
"column": 13,
"event": "note",
"message": "(3) entry to \u2018send_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 888,
"column": 22,
"event": "note",
"message": "(4) capacity: 48 bytes",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 906,
"column": 12,
"event": "note",
"message": "(5) following \u2018false\u2019 branch...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 910,
"column": 17,
"event": "note",
"message": "(6) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 910,
"column": 17,
"event": "note",
"message": "(7) calling \u2018queue_command\u2019 from \u2018send_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 557,
"column": 13,
"event": "note",
"message": "(8) entry to \u2018queue_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 565,
"column": 12,
"event": "note",
"message": "(9) following \u2018false\u2019 branch (when \u2018cmd\u2019 is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 568,
"column": 9,
"event": "note",
"message": "(10) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(11) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(12) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(13) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(14) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(15) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(16) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(17) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(18) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 52,
"event": "note",
"message": "(19) out-of-bounds read from byte 48 till byte 55 but \u2018iov\u2019 ends at byte 48",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 52,
"event": "note",
"message": "read of 8 bytes from after the end of \u2018iov\u2019",
"verbosity_level": 1
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 52,
"event": "note",
"message": "valid subscripts for \u2018iov\u2019 are \u2018[0]\u2019 to \u2018[2]\u2019",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " ^",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 569| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 570| \tfor (i = 0; i < iovlen; i++) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 571|-> \t\tmemcpy(cmd->data + cmd->len, iov[i].iov_base, iov[i].iov_len);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 572| \t\tcmd->len += iov[i].iov_len;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 573| \t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 126,
"language": "c/c++",
"tool": "gcc-analyzer",
"key_event_idx": 0,
"events": [
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 69,
"event": "warning[-Wanalyzer-out-of-bounds]",
"message": "stack-based buffer over-read",
"verbosity_level": 0
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 3286,
"column": 13,
"event": "note",
"message": "(1) entry to \u2018set_pa_data\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 3317,
"column": 9,
"event": "note",
"message": "(2) calling \u2018send_command\u2019 from \u2018set_pa_data\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 883,
"column": 13,
"event": "note",
"message": "(3) entry to \u2018send_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 888,
"column": 22,
"event": "note",
"message": "(4) capacity: 48 bytes",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 906,
"column": 12,
"event": "note",
"message": "(5) following \u2018false\u2019 branch...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 910,
"column": 17,
"event": "note",
"message": "(6) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 910,
"column": 17,
"event": "note",
"message": "(7) calling \u2018queue_command\u2019 from \u2018send_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 557,
"column": 13,
"event": "note",
"message": "(8) entry to \u2018queue_command\u2019",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 565,
"column": 12,
"event": "note",
"message": "(9) following \u2018false\u2019 branch (when \u2018cmd\u2019 is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 568,
"column": 9,
"event": "note",
"message": "(10) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(11) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(12) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(13) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(14) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(15) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(16) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 570,
"column": 23,
"event": "note",
"message": "(17) following \u2018true\u2019 branch (when \u2018i < iovlen\u2019)...",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 66,
"event": "note",
"message": "(18) ...to here",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 69,
"event": "note",
"message": "(19) out-of-bounds read from byte 56 till byte 63 but \u2018iov\u2019 ends at byte 48",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 69,
"event": "note",
"message": "read of 8 bytes from after the end of \u2018iov\u2019",
"verbosity_level": 1
},
{
"file_name": "bluez-5.75/emulator/bthost.c",
"line": 571,
"column": 69,
"event": "note",
"message": "valid subscripts for \u2018iov\u2019 are \u2018[0]\u2019 to \u2018[2]\u2019",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " ^",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 569| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 570| \tfor (i = 0; i < iovlen; i++) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 571|-> \t\tmemcpy(cmd->data + cmd->len, iov[i].iov_base, iov[i].iov_len);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 572| \t\tcmd->len += iov[i].iov_len;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 573| \t}",
"verbosity_level": 1
}
]
},
{
"checker": "CLANG_WARNING",
"language": "c/c++",
"tool": "clang",
"key_event_idx": 0,
"events": [
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1046,
"column": 7,
"event": "warning[unix.Malloc]",
"message": "Use of memory after it is freed",
"verbosity_level": 0
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1042,
"column": 2,
"event": "note",
"message": "Loop condition is true. Entering loop body",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1046,
"column": 7,
"event": "note",
"message": "Assuming field 'cb' is equal to pac_select_cb",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1046,
"column": 3,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1052,
"column": 7,
"event": "note",
"message": "Assuming 'lpac' is equal to field 'pac'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1052,
"column": 7,
"event": "note",
"message": "Left side of '||' is false",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1052,
"column": 28,
"event": "note",
"message": "Assuming 'cb' is equal to field 'cb'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1052,
"column": 7,
"event": "note",
"message": "Left side of '||' is false",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1053,
"column": 7,
"event": "note",
"message": "Assuming 'cb_data' is equal to field 'user_data'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1052,
"column": 3,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1059,
"column": 3,
"event": "note",
"message": "Calling 'media_endpoint_cancel'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 152,
"column": 2,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/src/log.h",
"line": 60,
"column": 2,
"event": "note",
"message": "expanded from macro 'DBG'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/src/log.h",
"line": 55,
"column": 2,
"event": "note",
"message": "expanded from macro 'DBG_IDX'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 152,
"column": 2,
"event": "note",
"message": "Loop condition is false. Exiting loop",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/src/log.h",
"line": 60,
"column": 2,
"event": "note",
"message": "expanded from macro 'DBG'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/src/log.h",
"line": 50,
"column": 35,
"event": "note",
"message": "expanded from macro 'DBG_IDX'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 157,
"column": 6,
"event": "note",
"message": "Assuming field 'call' is null",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 157,
"column": 2,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 162,
"column": 15,
"event": "note",
"message": "Field 'cb' is null",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 162,
"column": 2,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 165,
"column": 2,
"event": "note",
"message": "Calling 'endpoint_request_free'",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 138,
"column": 15,
"event": "note",
"message": "Field 'call' is null",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 138,
"column": 2,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 141,
"column": 6,
"event": "note",
"message": "Assuming field 'destroy' is null",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 141,
"column": 2,
"event": "note",
"message": "Taking false branch",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 145,
"column": 2,
"event": "note",
"message": "Memory is released",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 165,
"column": 2,
"event": "note",
"message": "Returning; memory was released via 1st parameter",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1059,
"column": 3,
"event": "note",
"message": "Returning; memory was released via 1st parameter",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1042,
"column": 2,
"event": "note",
"message": "Loop condition is true. Entering loop body",
"verbosity_level": 2
},
{
"file_name": "bluez-5.75/profiles/audio/media.c",
"line": 1046,
"column": 7,
"event": "note",
"message": "Use of memory after it is freed",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 1044| \t\tstruct pac_select_data *data;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 1045| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 1046|-> \t\tif (req->cb != pac_select_cb) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 1047| \t\t\tl = g_slist_next(l);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 1048| \t\t\tcontinue;",
"verbosity_level": 1
}
]
}
]
}