Task #1790 - podman-5.0.0-1.fc40/scan-results.err
back to task #1790download
Error: CPPCHECK_WARNING:
podman-5.0.0-build/podman-5.0.0/libpod/lock/shm/shm_lock.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-1341):
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:4: included_from: Included from here.
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: scope_hint: In function ‘cleanup_closep.part.0’
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:51:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘*(void *)p’
# 49| int *pp = p;
# 50| if (*pp >= 0)
# 51|-> TEMP_FAILURE_RETRY (close (*pp));
# 52| }
# 53|
Error: GCC_ANALYZER_WARNING (CWE-1341):
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:51:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘fd’
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: scope_hint: In function ‘cleanup_closep.part.0’
# 49| int *pp = p;
# 50| if (*pp >= 0)
# 51|-> TEMP_FAILURE_RETRY (close (*pp));
# 52| }
# 53|
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:212:3: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 210| }
# 211|
# 212|-> qsort (buffer, nfiles, NAME_MAX + 1, (int (*)(const void *, const void *)) strcmp);
# 213|
# 214| for (i = 0; i < nfiles; i++)
Error: GCC_ANALYZER_WARNING (CWE-775):
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: scope_hint: In function ‘get_cmd_line_args’
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:308:8: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/proc/self/cmdline", 0)’
# 306| char **argv;
# 307|
# 308|-> fd = open ("/proc/self/cmdline", O_RDONLY);
# 309| if (fd < 0)
# 310| return NULL;
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:375:3: warning[deadcode.DeadStores]: Value stored to 'argv0' is never read
# 373| #endif
# 374|
# 375|-> argv0 = argv[0];
# 376|
# 377| if (strstr (argv[0], "podman") == NULL)
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: scope_hint: In function ‘init’
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:453:7: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("/proc/self/fd")’
# 451|
# 452| /* Store how many FDs were open before the Go runtime kicked in. */
# 453|-> d = opendir ("/proc/self/fd");
# 454| if (d)
# 455| {
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:821:3: warning[deadcode.DeadStores]: Value stored to 'argv0' is never read
# 819| }
# 820|
# 821|-> argv0 = argv[0];
# 822|
# 823| userns_fd = open_namespace (pid_to_join, "user");
Error: GCC_ANALYZER_WARNING (CWE-775):
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c: scope_hint: In function ‘copy_file_to_fd’
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:956:8: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(file_to_read, 0)’
# 954| cleanup_close int fd = -1;
# 955|
# 956|-> fd = open (file_to_read, O_RDONLY);
# 957| if (fd < 0)
# 958| {
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/pkg/rootless/rootless_linux.c:1071:3: warning[deadcode.DeadStores]: Value stored to 'argv0' is never read
# 1069| }
# 1070|
# 1071|-> argv0 = argv[0];
# 1072|
# 1073| if (do_socket_activation)
Error: GCC_ANALYZER_WARNING (CWE-775):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘parse_proc_stringlist’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:117:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(list, 0)’
# 115| new_size = used + BUFSTEP;
# 116| new_buf = realloc(buf, new_size);
# 117|-> if (new_buf == NULL) {
# 118| free(buf);
# 119| fprintf(stderr, "realloc(%ld): out of memory\n", (long)(size + BUFSTEP));
Error: GCC_ANALYZER_WARNING (CWE-775):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:124:28: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(list, 0)’
# 122| buf = new_buf;
# 123| size = new_size;
# 124|-> memset(buf + used, '\0', size - used);
# 125| n = read(fd, buf + used, size - used - 1);
# 126| if (n < 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘containers_reexec’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:124:28: warning[-Wanalyzer-malloc-leak]: leak of ‘parse_proc_stringlist("/proc/self/cmdline")’
# 122| buf = new_buf;
# 123| size = new_size;
# 124|-> memset(buf + used, '\0', size - used);
# 125| n = read(fd, buf + used, size - used - 1);
# 126| if (n < 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:127:25: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
# 125| n = read(fd, buf + used, size - used - 1);
# 126| if (n < 0) {
# 127|-> fprintf(stderr, "read(): %m\n");
# 128| return NULL;
# 129| }
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘parse_proc_stringlist’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:127:25: warning[-Wanalyzer-malloc-leak]: leak of ‘new_buf’
# 125| n = read(fd, buf + used, size - used - 1);
# 126| if (n < 0) {
# 127|-> fprintf(stderr, "read(): %m\n");
# 128| return NULL;
# 129| }
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:153:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
# 151| }
# 152| }
# 153|-> ret[i] = NULL;
# 154| return ret;
# 155| }
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:153:16: warning[-Wanalyzer-malloc-leak]: leak of ‘new_buf’
# 151| }
# 152| }
# 153|-> ret[i] = NULL;
# 154| return ret;
# 155| }
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:235:12: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 233| return -1;
# 234| }
# 235|-> exename = basename(argv[0]);
# 236| mmfd = syscall(SYS_memfd_create, exename, (long) MFD_ALLOW_SEALING | MFD_CLOEXEC);
# 237| if (mmfd == -1) {
Error: GCC_ANALYZER_WARNING (CWE-688):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘copy_self_proc_exe’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:235:19: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:14: included_from: Included from here.
/usr/include/string.h:540:14: note: argument 1 of ‘basename’ must be non-null
# 233| return -1;
# 234| }
# 235|-> exename = basename(argv[0]);
# 236| mmfd = syscall(SYS_memfd_create, exename, (long) MFD_ALLOW_SEALING | MFD_CLOEXEC);
# 237| if (mmfd == -1) {
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c: scope_hint: In function ‘containers_reexec’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:290:12: warning[-Wanalyzer-malloc-leak]: leak of ‘parse_proc_stringlist("/proc/self/cmdline")’
# 288| return fd;
# 289|
# 290|-> if (fexecve(fd, argv, environ) == -1) {
# 291| close(fd);
# 292| fprintf(stderr, "Error during reexec(...): %m\n");
Error: CLANG_WARNING:
podman-5.0.0-build/podman-5.0.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c:295:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'argv'
# 293| return -1;
# 294| }
# 295|-> close(fd);
# 296| return 0;
# 297| }
Error: CPPCHECK_WARNING:
podman-5.0.0-build/podman-5.0.0/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: COMPILER_WARNING (CWE-1164):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/mattn/go-sqlite3/sqlite3.go:85:1: warning[-Wunused-function]: ‘_sqlite3_exec’ defined but not used
# 85 | _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)
# | ^~~~~~~~~~~~~
# 83|
# 84| static int
# 85|-> _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)
# 86| {
# 87| int rv = sqlite3_exec(db, pcmd, 0, 0, 0);
Error: GCC_ANALYZER_WARNING (CWE-476):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go: scope_hint: In function 'New'
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go:77:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'c'
# 75| CK_C_GetFunctionList list;
# 76| struct ctx *c = calloc(1, sizeof(struct ctx));
# 77|-> c->handle = dlopen(module, RTLD_LAZY);
# 78| if (c->handle == NULL) {
# 79| free(c);
Error: GCC_ANALYZER_WARNING (CWE-476):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go: scope_hint: In function ‘New’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go:77:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘c’
# 75| CK_C_GetFunctionList list;
# 76| struct ctx *c = calloc(1, sizeof(struct ctx));
# 77|-> c->handle = dlopen(module, RTLD_LAZY);
# 78| if (c->handle == NULL) {
# 79| free(c);
Error: GCC_ANALYZER_WARNING (CWE-401):
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go: scope_hint: In function ‘GetAttributeValue.part.0’
podman-5.0.0-build/podman-5.0.0/vendor/github.com/miekg/pkcs11/pkcs11.go:316:32: warning[-Wanalyzer-malloc-leak]: leak of ‘*((CK_ATTRIBUTE *)temp).pValue’
# 314| continue;
# 315| }
# 316|-> temp[i].pValue = calloc(temp[i].ulValueLen, sizeof(CK_BYTE));
# 317| }
# 318| return c->sym->C_GetAttributeValue(session, object, temp, templen);
Error: CPPCHECK_WARNING:
podman-5.0.0-build/podman-5.0.0/vendor/github.com/opencontainers/runc/libcontainer/userns/userns_maps.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.