Task #1676 - nftables-1.0.9-3.fc40/scan-results.err
back to task #1676download
Error: GCC_ANALYZER_WARNING (CWE-476):
nftables-1.0.9-build/nftables-1.0.9/include/list.h:58:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nftables-1.0.9-build/nftables-1.0.9/src/parser_json.c: scope_hint: In function ‘json_parse_set_stmt_list.part.0’
nftables-1.0.9-build/nftables-1.0.9/include/json.h:27: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/datatype.h:4: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/gmputil.h:60: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/utils.h:10: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/gmputil.h:59: included_from: Included from here.
# 56| {
# 57| next->prev = new;
# 58|-> new->next = next;
# 59| new->prev = prev;
# 60| prev->next = new;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/statement.c:17: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/rule.h:4: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/nftables.h:6: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/include/utils.h:134:3: warning[deadcode.DeadStores]: Value stored to 'x' is never read
# 132| }
# 133| if (!(x & 0x80000000u)) {
# 134|-> x <<= 1;
# 135| r -= 1;
# 136| }
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/cache.c:157:2: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer
# 155| hash = djb_hash(handle->set.name) % NFT_CACHE_HSIZE;
# 156|
# 157|-> list_for_each_entry(obj, &filter->obj[hash].head, list) {
# 158| if (obj->family == handle->family &&
# 159| !strcmp(obj->table, handle->table.name) &&
Error: CPPCHECK_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/cli.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/datatype.c:1172:8: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>' is a garbage value
# 1170| return erec;
# 1171|
# 1172|-> if (s > UINT32_MAX)
# 1173| return error(&sym->location, "value too large");
# 1174|
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/evaluate.c:902:20: warning[deadcode.DeadStores]: Value stored to 'pctx' during its initialization is never read
# 900| static int expr_evaluate_inner(struct eval_ctx *ctx, struct expr **exprp)
# 901| {
# 902|-> struct proto_ctx *pctx = eval_proto_ctx(ctx);
# 903| const struct proto_desc *desc = NULL;
# 904| struct expr *expr = *exprp;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/evaluate.c:1936:7: warning[core.NullDereference]: Access to field 'type' results in a dereference of a null pointer (loaded from field 'dtype')
# 1934| }
# 1935|
# 1936|-> if (ectx.dtype->type == TYPE_VERDICT) {
# 1937| data = verdict_expr_alloc(&netlink_location, 0, NULL);
# 1938| } else {
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/exthdr.c:82:36: warning[core.NullDereference]: Access to field 'name' results in a dereference of a null pointer (loaded from field 'desc')
# 80| nft_print(octx, " %s", expr->exthdr.tmpl->token);
# 81| } else if (expr->exthdr.op == NFT_EXTHDR_OP_SCTP) {
# 82|-> nft_print(octx, "sctp chunk %s", expr->exthdr.desc->name);
# 83| if (expr->exthdr.flags & NFT_EXTHDR_F_PRESENT)
# 84| return;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/json.c:1783:2: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer
# 1781| struct rule *rule;
# 1782|
# 1783|-> list_for_each_entry(chain, &table->chain_cache.list, cache.list) {
# 1784| if (chain->handle.family != cmd->handle.family ||
# 1785| strcmp(cmd->handle.chain.name, chain->handle.chain.name))
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/main.c:194:3: warning[deadcode.DeadStores]: Value stored to 'i' is never read
# 192| opt->name);
# 193| if (opt->arg)
# 194|-> i += snprintf(optbuf + i, sizeof(optbuf) - i, " %s", opt->arg);
# 195|
# 196| printf("%-34s%s\n", optbuf, opt->help);
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/mnl.c:452:3: warning[deadcode.DeadStores]: Value stored to 'ret' is never read
# 450|
# 451| /* Continue on error, make sure we get all acknowledgments */
# 452|-> ret = mnl_cb_run2(rcv_buf, ret, 0, portid,
# 453| netlink_echo_callback, &cb_data,
# 454| cb_ctl_array, MNL_ARRAY_SIZE(cb_ctl_array));
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/monitor.c:927:33: warning[core.BitwiseShift]: Left shift overflows the capacity of 'int'
# 925| netlink_events_cache_update(monh, nlh, type);
# 926|
# 927|-> if (!(monh->monitor_flags & (1 << type)))
# 928| return ret;
# 929|
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/netlink.c:522:17: warning[core.UndefinedBinaryOperatorResult]: The left operand of '*' is a garbage value
# 520| {
# 521| return constant_expr_alloc(loc, &invalid_type, BYTEORDER_INVALID,
# 522|-> nld->len * BITS_PER_BYTE, nld->value);
# 523| }
# 524|
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/netlink.c:535:10: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 533| chain = constant_expr_alloc(loc, &string_type,
# 534| BYTEORDER_HOST_ENDIAN,
# 535|-> strlen(nld->chain) * BITS_PER_BYTE,
# 536| nld->chain);
# 537| break;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/netlink.c:1265:8: warning[core.NullDereference]: Dereference of null pointer
# 1263| compound_expr_add(concat, expr);
# 1264| if (set->key->etype == EXPR_CONCAT)
# 1265|-> n = list_next_entry(n, list);
# 1266| }
# 1267|
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/nfnl_osf.c:319:3: warning[deadcode.DeadStores]: Value stored to 'pbeg' is never read
# 317| i = sizeof(f.subtype);
# 318| snprintf(f.subtype, i, "%.*s", i - 1, pbeg);
# 319|-> pbeg = pend + 1;
# 320| }
# 321|
Error: COMPILER_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c: warning: -Wno-implicit-function-declaration detected - is this intentional ?
Error: GCC_ANALYZER_WARNING (CWE-457):
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c: scope_hint: In function ‘nft_parse’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:2209:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:2194:9: note: in expansion of macro ‘YYCOPY’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:7746:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:2209:25: note: in definition of macro ‘YYCOPY’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:7746:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:2194:9: note: in expansion of macro ‘YYCOPY’
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:7746:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
# 2207| # if defined __GNUC__ && 1 < __GNUC__
# 2208| # define YYCOPY(Dst, Src, Count) \
# 2209|-> __builtin_memcpy (Dst, Src, YY_CAST (YYSIZE_T, (Count)) * sizeof (*(Src)))
# 2210| # else
# 2211| # define YYCOPY(Dst, Src, Count) \
Error: GCC_ANALYZER_WARNING (CWE-457):
nftables-1.0.9-build/nftables-1.0.9/src/parser_bison.c:7876:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
# 7874| unconditionally makes the parser a bit smaller, and it avoids a
# 7875| GCC warning that YYVAL may be used uninitialized. */
# 7876|-> yyval = yyvsp[1-yylen];
# 7877|
# 7878| /* Default location. */
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/parser_json.c:96:3: warning[deadcode.DeadStores]: Value stored to 'sep' is never read
# 94| strcat(buf, sep);
# 95| strcat(buf, "SET_RHS");
# 96|-> sep = ", ";
# 97| }
# 98| return buf;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/payload.c:511:4: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 509| return NULL;
# 510|
# 511|-> list_add_tail(&nstmt->list, &ctx->stmt->list);
# 512| return desc_upper;
# 513| }
Error: GCC_ANALYZER_WARNING (CWE-476):
nftables-1.0.9-build/nftables-1.0.9/src/payload.c: scope_hint: In function ‘payload_may_dependency_kill’
nftables-1.0.9-build/nftables-1.0.9/src/payload.c:897:60: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 895| * for stacked protocols if we only have protcol type matches.
# 896| */
# 897|-> if (dep->left->etype == EXPR_PAYLOAD && dep->op == OP_EQ &&
# 898| expr->payload.base == dep->left->payload.base) {
# 899| if (expr->flags & EXPR_F_PROTOCOL)
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/rule.c:366:4: warning[deadcode.DeadStores]: Value stored to 'delim' is never read
# 364| if (set->flags & NFT_SET_TIMEOUT) {
# 365| nft_print(octx, "%stimeout", delim);
# 366|-> delim = ",";
# 367| }
# 368| nft_print(octx, "%s", opts->stmt_separator);
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/rule.c:1417:18: warning[core.NullDereference]: Dereference of null pointer
# 1415| struct set *set, struct expr *expr, uint32_t flags)
# 1416| {
# 1417|-> expr->set_flags |= set->flags;
# 1418| if (mnl_nft_setelem_add(ctx, cmd, set, expr, flags) < 0)
# 1419| return -1;
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/rule.c:2166:16: warning[core.NullDereference]: Dereference of null pointer
# 2164|
# 2165| nft_print(&ctx->nft->output, "table %s %s {\n",
# 2166|-> family2str(table->handle.family),
# 2167| table->handle.table.name);
# 2168|
Error: CLANG_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/rule.c:2241:34: warning[core.NullDereference]: Dereference of null pointer
# 2239| struct output_ctx *octx)
# 2240| {
# 2241|-> const char *family = family2str(table->handle.family);
# 2242|
# 2243| if (table->has_xt_stmts)
Error: GCC_ANALYZER_WARNING (CWE-476):
nftables-1.0.9-build/nftables-1.0.9/src/rule.c: scope_hint: In function ‘table_print_declaration’
nftables-1.0.9-build/nftables-1.0.9/src/rule.c:2243:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘table’
# 2241| const char *family = family2str(table->handle.family);
# 2242|
# 2243|-> if (table->has_xt_stmts)
# 2244| fprintf(octx->error_fp,
# 2245| "# Warning: table %s %s is managed by iptables-nft, do not touch!\n",
Error: COMPILER_WARNING:
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: warning: -Wno-implicit-function-declaration detected - is this intentional ?
Error: GCC_ANALYZER_WARNING (CWE-401):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:55:23: warning[-Wanalyzer-malloc-leak]: leak of ‘<return-value>’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:1244:13: note: in expansion of macro ‘yy_scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7624:17: note: in expansion of macro ‘yy_scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7639:17: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7657:13: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7585:17: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7585:17: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7595:31: note: in expansion of macro ‘yyalloc’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7609:9: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7272:10: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7284:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7530:13: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7284:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7285:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7609:9: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7657:13: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
# 53| #define nft__scan_bytes_ALREADY_DEFINED
# 54| #else
# 55|-> #define yy_scan_bytes nft__scan_bytes
# 56| #endif
# 57|
Error: GCC_ANALYZER_WARNING (CWE-401):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:55:23: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:1244:13: note: in expansion of macro ‘yy_scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7624:17: note: in expansion of macro ‘yy_scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7639:17: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7648:24: note: in expansion of macro ‘yyalloc’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__scan_string’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7657:13: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7585:17: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7585:17: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7609:9: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7272:10: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7284:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7530:13: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7284:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7285:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7609:9: note: in expansion of macro ‘yy_switch_to_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7657:13: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7627:16: note: in expansion of macro ‘yy_scan_bytes’
# 53| #define nft__scan_bytes_ALREADY_DEFINED
# 54| #else
# 55|-> #define yy_scan_bytes nft__scan_bytes
# 56| #endif
# 57|
Error: GCC_ANALYZER_WARNING (CWE-401):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7348:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7331:21: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7338:31: note: in expansion of macro ‘yyalloc’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__create_buffer’
# 7346| */
# 7347| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 7348|-> if ( ! b->yy_ch_buf )
# 7349| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
# 7350|
Error: GCC_ANALYZER_WARNING (CWE-476):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7402:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7247:10: note: in expansion of macro ‘yyrestart’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7255:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7530:13: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7255:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7257:13: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7331:21: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7353:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7390:17: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7432:10: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7353:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7257:13: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7260:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7260:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7260:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7390:17: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7432:10: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
# 7400|
# 7401| /* %if-c-only */
# 7402|-> b->yy_input_file = file;
# 7403| /* %endif */
# 7404| /* %if-c++-only */
Error: GCC_ANALYZER_WARNING (CWE-401):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft_ensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7553:42: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(8)’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:958:13: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7331:21: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7353:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7390:17: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7432:10: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7399:9: note: in expansion of macro ‘yy_flush_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7353:9: note: in expansion of macro ‘yy_init_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:958:13: note: in expansion of macro ‘yy_create_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:959:9: note: in expansion of macro ‘yypush_buffer_state’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft_ensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7467:6: note: in expansion of macro ‘yypush_buffer_state’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7476:9: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7530:13: note: in expansion of macro ‘yyensure_buffer_stack’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7545:66: note: in expansion of macro ‘yyalloc’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft_ensure_buffer_stack’
# 7551| memset(yyg->yy_buffer_stack, 0, num_to_alloc * sizeof(struct yy_buffer_state*));
# 7552|
# 7553|-> yyg->yy_buffer_stack_max = num_to_alloc;
# 7554| yyg->yy_buffer_stack_top = 0;
# 7555| return;
Error: GCC_ANALYZER_WARNING (CWE-401):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7655:32: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7639:17: note: in expansion of macro ‘yy_scan_bytes’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7648:24: note: in expansion of macro ‘yyalloc’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘nft__scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7657:13: note: in expansion of macro ‘yy_scan_buffer’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7585:17: note: in expansion of macro ‘yy_scan_buffer’
# 7653| buf[i] = yybytes[i];
# 7654|
# 7655|-> buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 7656|
# 7657| b = yy_scan_buffer( buf, n , yyscanner);
Error: GCC_ANALYZER_WARNING (CWE-476):
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7894:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘scanner’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l: scope_hint: In function ‘scanner_init’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:1253:9: note: in expansion of macro ‘yylex_init_extra’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:7975:5: note: in expansion of macro ‘yylex_init_extra’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c: scope_hint: In function ‘scanner_init’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.c:274: included_from: Included from here.
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:1253:9: note: in expansion of macro ‘yylex_init_extra’
nftables-1.0.9-build/nftables-1.0.9/src/scanner.l:1254:9: note: in expansion of macro ‘yyset_out’
# 7892| {
# 7893| struct yyguts_t * yyg = (struct yyguts_t*)yyscanner;
# 7894|-> yyout = _out_str ;
# 7895| }
# 7896|