Task log

Task #18 - bubblewrap-0.9.0-1.fc41/scan-results.err

Error: GCC_ANALYZER_WARNING (CWE-775):
bubblewrap-0.9.0/bind-mount.c: scope_hint: In function ‘bind_mount’
bubblewrap-0.9.0/bind-mount.c:408:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(realpath(dest, 0), 2621440)’
#  406|       return BIND_MOUNT_ERROR_REALPATH_DEST;
#  407|   
#  408|->   dest_fd = open (resolved_dest, O_PATH | O_CLOEXEC);
#  409|     if (dest_fd < 0)
#  410|       {

Error: CLANG_WARNING:
bubblewrap-0.9.0/bubblewrap.c:1470:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1468|           case SETUP_MAKE_SYMLINK:
# 1469|             assert (op->source != NULL);  /* guaranteed by the constructor */
# 1470|->           if (symlink (op->source, dest) != 0)
# 1471|               {
# 1472|                 if (errno == EEXIST)

Error: GCC_ANALYZER_WARNING:
bubblewrap-0.9.0/tests/try-syscall.c: scope_hint: In function ‘main’
bubblewrap-0.9.0/tests/try-syscall.c:157:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘-1’
#  155|           {
#  156|             /* If not blocked by seccomp, this will fail with EBADF */
#  157|->           if (listen (-1, 42) != 0)
#  158|               {
#  159|                 errsv = errno;

Error: GCC_ANALYZER_WARNING (CWE-401):
bubblewrap-0.9.0/utils.c: scope_hint: In function ‘load_file_data’
bubblewrap-0.9.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(data, (long unsigned int)data_len)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: GCC_ANALYZER_WARNING (CWE-401):
bubblewrap-0.9.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.9.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(value,  size)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: CLANG_WARNING:
bubblewrap-0.9.0/utils.c:741:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'p'
#  739|     while (p);
#  740|   
#  741|->   return 0;
#  742|   }
#  743|   

Error: CLANG_WARNING:
bubblewrap-0.9.0/utils.c:841:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'value'
#  839|         n = readlink (pathname, value, size - 1);
#  840|         if (n < 0)
#  841|->         return NULL;
#  842|       }
#  843|     while (size - 2 < (size_t)n);

Error: GCC_ANALYZER_WARNING (CWE-415):
bubblewrap-0.9.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘data’
bubblewrap-0.9.0/utils.c: scope_hint: In function ‘load_file_data’
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|   

Error: GCC_ANALYZER_WARNING (CWE-415):
bubblewrap-0.9.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘value’
bubblewrap-0.9.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.9.0/utils.h:22: included_from: Included from here.
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|