Task #180 - util-linux-2.40-13.fc41/scan-results.err
back to task #180download
Error: CLANG_WARNING: util-linux-2.40/disk-utils/cfdisk.c:2859:2: warning[unix.Malloc]: Potential leak of memory pointed to by '_cf.menu' # 2857| #endif # 2858| rc = fdisk_deassign_device(cf->cxt, cf->nwrites == 0); # 2859|-> fdisk_unref_context(cf->cxt); # 2860| DBG(MISC, ul_debug("bye! [rc=%d]", rc)); # 2861| return rc == 0 ? EXIT_SUCCESS : EXIT_FAILURE; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/disk-utils/fdformat.c:127:49: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc((long unsigned int)track_size) + (sizetype)count’ util-linux-2.40/disk-utils/fdformat.c:20: included_from: Included from here. # 125| } # 126| for (count = 0; count < track_size; count++) # 127|-> if (data[count] != FD_FILL_BYTE) { # 128| if (retries_left) { # 129| format_begin(ctrl); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/disk-utils/fdformat.c: scope_hint: In function ‘verify_disk’ util-linux-2.40/disk-utils/fdformat.c:127:49: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc((long unsigned int)track_size)’ util-linux-2.40/disk-utils/fdformat.c:28: included_from: Included from here. # 125| } # 126| for (count = 0; count < track_size; count++) # 127|-> if (data[count] != FD_FILL_BYTE) { # 128| if (retries_left) { # 129| format_begin(ctrl); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/fdisk.c: scope_hint: In function ‘strtosize_sectors’ util-linux-2.40/disk-utils/fdisk.c:657:12: warning[-Wanalyzer-malloc-leak]: leak of ‘str’ # 655| # 656| rc = strtosize(str, res); # 657|-> if (rc) # 658| return rc; # 659| Error: CLANG_WARNING: util-linux-2.40/disk-utils/fdisk.c:658:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'str' # 656| rc = strtosize(str, res); # 657| if (rc) # 658|-> return rc; # 659| # 660| if (insec) { Error: CLANG_WARNING: util-linux-2.40/disk-utils/fsck.c:694:3: warning[unix.Malloc]: Potential memory leak # 692| pid = -1; # 693| else if ((pid = fork()) < 0) { # 694|-> warn(_("fork failed")); # 695| free_instance(inst); # 696| return errno; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/fsck.c: scope_hint: In function ‘compile_fs_type’ util-linux-2.40/disk-utils/fsck.c:992:28: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(fs_type)’ util-linux-2.40/disk-utils/fsck.c:64: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/disk-utils/fsck.c:58: included_from: Included from here. # 990| s += 2; # 991| negate = 1; # 992|-> } else if (*s == '!') { # 993| s++; # 994| negate = 1; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/fsck.c:1002:28: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(fs_type)’ # 1000| s += 5; # 1001| loop_special_case: # 1002|-> cmp->type[num] = negate ? FS_TYPE_NEGOPT : FS_TYPE_OPT; # 1003| } else { # 1004| if (first_negate) { Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/fsck.c:1008:44: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(fs_type)’ # 1006| first_negate = 0; # 1007| } # 1008|-> if ((negate && !cmp->negate) || # 1009| (!negate && cmp->negate)) { # 1010| errx(FSCK_EX_USAGE, Error: CLANG_WARNING: util-linux-2.40/disk-utils/fsck.minix.c:1403:39: warning[core.DivideZero]: Division by zero # 1401| printf(_("\n%6ld inodes used (%ld%%)\n"), # 1402| (get_ninodes() - free), # 1403|-> 100 * (get_ninodes() - free) / get_ninodes()); # 1404| for (inode = get_first_zone(), free = 0; inode < get_nzones(); inode++) # 1405| if (!zone_in_use(inode)) Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/disk-utils/mkfs.cramfs.c:304:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc(len + 257)’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 302| /* TODO: Reuse the parent's buffer to save memcpy'ing and duplication. */ # 303| path = xmalloc(len + 1 + MAX_INPUT_NAMELEN + 1); # 304|-> memcpy(path, name, len); # 305| endpath = path + len; # 306| *endpath = '/'; Error: CPPCHECK_WARNING (CWE-190): util-linux-2.40/disk-utils/mkfs.cramfs.c:379: error[integerOverflow]: Signed integer overflow for expression '-(1<<24)'. # 377| } else { # 378| entry->size = st.st_rdev; # 379|-> if (entry->size & -(1<<CRAMFS_SIZE_WIDTH)) # 380| warn_dev = 1; # 381| } Error: CLANG_WARNING: util-linux-2.40/disk-utils/mkfs.cramfs.c:894:8: warning[unix.Malloc]: Potential leak of memory pointed to by 'root_entry' # 892| # 893| /* Put the checksum in. */ # 894|-> crc = crc32(crc, (unsigned char *) (rom_image+opt_pad), (offset-opt_pad)); # 895| ((struct cramfs_super *) (rom_image+opt_pad))->fsid.crc = u32_toggle_endianness(cramfs_is_big_endian, crc); # 896| if (verbose) Error: CLANG_WARNING: util-linux-2.40/disk-utils/mkfs.minix.c:375:19: warning[core.NullDereference]: Array access (via field 'i_zone') results in a null pointer dereference # 373| # 374| mark_inode(MINIX_ROOT_INO); # 375|-> inode->i_zone[0] = get_free_block(ctl); # 376| inode->i_nlinks = 2; # 377| inode->i_time = mkfs_minix_time(NULL); Error: CLANG_WARNING: util-linux-2.40/disk-utils/sfdisk.c:842:24: warning[core.UndefinedBinaryOperatorResult]: The left operand of '/' is a garbage value # 840| for (i = 0; i < argc; i++) { # 841| if (get_size(argv[i], 0, &sz) == 0) # 842|-> printf("%ju\n", sz / 2); # 843| } # 844| } else { Error: CLANG_WARNING: util-linux-2.40/disk-utils/sfdisk.c:851:34: warning[core.UndefinedBinaryOperatorResult]: The left operand of '/' is a garbage value # 849| while ((dev = next_proc_partition(&f))) { # 850| if (get_size(dev, 1, &sz) == 0) { # 851|-> printf("%s: %9ju\n", dev, sz / 2); # 852| total += sz / 2; # 853| } Error: CLANG_WARNING: util-linux-2.40/term-utils/script.c:62: included_from: Included from here. util-linux-2.40/include/all-io.h:55:7: warning[unix.Errno]: An undefined value may be read from 'errno' # 53| } else if (errno != EINTR && errno != EAGAIN) # 54| return -1; # 55|-> if (errno == EAGAIN) /* Try later, *sigh* */ # 56| xusleep(250000); # 57| } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/disk-utils/fdisk.c:36: included_from: Included from here. util-linux-2.40/include/all-io.h: scope_hint: In function ‘read_all’ util-linux-2.40/include/all-io.h:67:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buf’ where non-null expected util-linux-2.40/disk-utils/fdisk.h:18: included_from: Included from here. util-linux-2.40/disk-utils/fdisk.c:47: included_from: Included from here. util-linux-2.40/disk-utils/fdisk.c:35: included_from: Included from here. <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 65| int tries = 0; # 66| # 67|-> memset(buf, 0, count); # 68| while (count > 0) { # 69| ret = read(fd, buf, count); Error: GCC_ANALYZER_WARNING (CWE-910): util-linux-2.40/lib/pager.c:22: included_from: Included from here. util-linux-2.40/include/c.h: scope_hint: In function ‘ul_sig_warn’ util-linux-2.40/include/c.h:431:41: warning[-Wanalyzer-fd-use-after-close]: ‘write’ on closed file descriptor ‘2’ util-linux-2.40/include/c.h:60:62: note: in definition of macro ‘ignore_result’ util-linux-2.40/include/c.h:438:9: note: in expansion of macro ‘ul_err_write’ util-linux-2.40/lib/pager.c: scope_hint: In function ‘ul_sig_warn’ util-linux-2.40/include/c.h:18: included_from: Included from here. util-linux-2.40/include/c.h:60:62: note: in definition of macro ‘ignore_result’ util-linux-2.40/include/c.h:438:9: note: in expansion of macro ‘ul_err_write’ # 429| # 430| # 431|-> #define ul_err_write(_m) ignore_result( write(STDERR_FILENO, _m, strlen(_m)) ) # 432| # 433| /* Error: CLANG_WARNING: util-linux-2.40/libsmartcols/src/line.c:25: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:15: included_from: Included from here. util-linux-2.40/include/list.h:53:12: warning[unix.Malloc]: Use of memory after it is freed # 51| { # 52| next->prev = add; # 53|-> add->next = next; # 54| add->prev = prev; # 55| prev->next = add; Error: GCC_ANALYZER_WARNING (CWE-416): util-linux-2.40/include/list.h:53:19: warning[-Wanalyzer-use-after-free]: use after 'free' of 'child' util-linux-2.40/libsmartcols/src/line.c: scope_hint: In function 'scols_line_add_child' util-linux-2.40/libsmartcols/src/smartcolsP.h:19: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libsmartcols/src/line.c:247:9: note: in expansion of macro 'DBG' util-linux-2.40/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libsmartcols/src/line.c:223:9: note: in expansion of macro 'DBG' # 51| { # 52| next->prev = add; # 53|-> add->next = next; # 54| add->prev = prev; # 55| prev->next = add; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘new_counter_spec(optarg)’ util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘main’ util-linux-2.40/misc-utils/lsfd.h:37: included_from: Included from here. util-linux-2.40/misc-utils/lsfd.c:85: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘new_miscdev(minor, & name)’ util-linux-2.40/misc-utils/lsfd-cdev.c: scope_hint: In function ‘read_misc’ util-linux-2.40/misc-utils/lsfd.h:37: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/list.h:15: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘new_nodev(minor, filesystem)’ util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘add_nodev’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/misc-utils/lsfd.c:75: included_from: Included from here. util-linux-2.40/misc-utils/lsfd.c:810:16: note: in expansion of macro ‘list_last_entry’ util-linux-2.40/include/xalloc.h: scope_hint: In function ‘add_nodev’ util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘add_nodev’ util-linux-2.40/misc-utils/lsfd.c:810:16: note: in expansion of macro ‘list_last_entry’ # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘new_partition(__dev, & name)’ util-linux-2.40/misc-utils/lsfd-bdev.c: scope_hint: In function ‘read_partitions’ util-linux-2.40/misc-utils/lsfd.h:37: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/list.h:15: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘read_ttydrv(&line)’ util-linux-2.40/misc-utils/lsfd-cdev.c: scope_hint: In function ‘read_tty_drivers’ # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 24)’ util-linux-2.40/misc-utils/kill.c: scope_hint: In function ‘parse_arguments’ # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 32)’ util-linux-2.40/misc-utils/logger.c: scope_hint: In function ‘add_structured_data_id’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/all-io.h:20: included_from: Included from here. util-linux-2.40/misc-utils/logger.c:57: included_from: Included from here. util-linux-2.40/misc-utils/logger.c: scope_hint: In function ‘add_structured_data_id’ util-linux-2.40/misc-utils/logger.c:63: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 48)’ util-linux-2.40/sys-utils/prlimit.c: scope_hint: In function ‘add_prlim’ util-linux-2.40/sys-utils/prlimit.c:28: included_from: Included from here. util-linux-2.40/include/list.h: scope_hint: In function ‘add_prlim’ # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 56)’ util-linux-2.40/text-utils/hexdump-parse.c: scope_hint: In function ‘color_fmt’ util-linux-2.40/text-utils/hexdump-parse.c:46: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/text-utils/hexdump.h:38: included_from: Included from here. util-linux-2.40/include/c.h:18: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(24)’ util-linux-2.40/misc-utils/lsclocks.c: scope_hint: In function ‘main’ util-linux-2.40/misc-utils/lsclocks.c:38: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/list.h:55:20: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(32)’ util-linux-2.40/misc-utils/lsfd-unkn.c: scope_hint: In function ‘add_inode’ util-linux-2.40/misc-utils/lsfd.h:37: included_from: Included from here. # 53| add->next = next; # 54| add->prev = prev; # 55|-> prev->next = add; # 56| } # 57| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/include/list.h:81:9: warning[-Wanalyzer-null-dereference]: dereference of NULL 'cxt' util-linux-2.40/libfdisk/src/wipe.c: scope_hint: In function 'fdisk_set_wipe_area' util-linux-2.40/libfdisk/src/fdiskP.h:25: included_from: Included from here. util-linux-2.40/libfdisk/src/fdiskP.h:47:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libfdisk/src/wipe.c:90:9: note: in expansion of macro 'DBG' # 79| _INLINE_ void list_add_tail(struct list_head *add, struct list_head *head) # 80| { # 81|-> __list_add(add, head->prev, head); # 82| } # 83| Error: GCC_ANALYZER_WARNING (CWE-416): util-linux-2.40/include/list.h:107:9: warning[-Wanalyzer-use-after-free]: use after 'free' of 'v' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/blkidP.h:34: included_from: Included from here. util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2095:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:150:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2398:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c:676:9: note: in expansion of macro 'list_for_each_safe' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:30: included_from: Included from here. util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:888:41: note: in expansion of macro 'list_entry' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:281:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:888:41: note: in expansion of macro 'list_entry' # 105| _INLINE_ void list_del(struct list_head *entry) # 106| { # 107|-> __list_del(entry->prev, entry->next); # 108| } # 109| Error: CLANG_WARNING: util-linux-2.40/libmount/src/tab_diff.c:18: included_from: Included from here. util-linux-2.40/libmount/src/mountP.h:28: included_from: Included from here. util-linux-2.40/include/list.h:107:13: warning[unix.Malloc]: Use of memory after it is freed # 105| _INLINE_ void list_del(struct list_head *entry) # 106| { # 107|-> __list_del(entry->prev, entry->next); # 108| } # 109| Error: CLANG_WARNING: util-linux-2.40/include/list.h:116:13: warning[unix.Malloc]: Use of memory after it is freed # 114| _INLINE_ void list_del_init(struct list_head *entry) # 115| { # 116|-> __list_del(entry->prev, entry->next); # 117| INIT_LIST_HEAD(entry); # 118| } Error: CLANG_WARNING: util-linux-2.40/libsmartcols/src/table.c:29: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:15: included_from: Included from here. util-linux-2.40/include/list.h:311:20: warning[core.NullDereference]: Access to field 'prev' results in a dereference of a null pointer (loaded from field 'next') # 309| (*cmp)(tail->next, tail->next, data); # 310| # 311|-> tail->next->prev = tail; # 312| tail = tail->next; # 313| } while (tail->next); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/libsmartcols/src/smartcolsP.h:15: included_from: Included from here. util-linux-2.40/libsmartcols/src/calculate.c:1: included_from: Included from here. util-linux-2.40/include/list.h: scope_hint: In function 'merge_and_restore_back_links' util-linux-2.40/include/list.h:311:34: warning[-Wanalyzer-null-dereference]: dereference of NULL 'list' util-linux-2.40/libsmartcols/src/smartcolsP.h:19: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libsmartcols/src/calculate.c:491:25: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h: scope_hint: In function 'merge_and_restore_back_links' # 309| (*cmp)(tail->next, tail->next, data); # 310| # 311|-> tail->next->prev = tail; # 312| tail = tail->next; # 313| } while (tail->next); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/partx.c:37: included_from: Included from here. util-linux-2.40/include/strutils.h: scope_hint: In function ‘main’ util-linux-2.40/include/strutils.h:239:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(*<unknown>)’ util-linux-2.40/disk-utils/partx.c:38: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/disk-utils/partx.c:33: included_from: Included from here. # 237| size_t sz = prefix ? strlen(prefix) : 0; # 238| # 239|-> if (s && sz && strncmp(s, prefix, sz) == 0) # 240| return s + sz; # 241| return NULL; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/uuidgen.c:22: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘unhex’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc((*valuelen >> 1) + 1)’ # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/setpriv-landlock.c:19: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘parse_landlock_rule’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(32)’ util-linux-2.40/sys-utils/setpriv-landlock.c:18: included_from: Included from here. # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/fsck.cramfs.c:70: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘test_crc’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(4096)’ util-linux-2.40/disk-utils/fsck.cramfs.c:58: included_from: Included from here. # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/lsfd.h:37: included_from: Included from here. util-linux-2.40/misc-utils/lsfd-sock-xinfo.c:44: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘tcp6_xinfo_scan_line’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(72)’ # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/disk-utils/mkfs.cramfs.c:61: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘parse_directory’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(len + 257)’ # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/readprofile.c:50: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(len)’ # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/xalloc.h: scope_hint: In function ‘color_fmt’ util-linux-2.40/include/xalloc.h:33:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrndup(a, (long unsigned int)(p2 - a))’ util-linux-2.40/text-utils/hexdump-parse.c:238:9: note: in expansion of macro ‘list_for_each’ /usr/include/libintl.h:100: included_from: Included from here. util-linux-2.40/include/nls.h:27: included_from: Included from here. util-linux-2.40/text-utils/hexdump-parse.c:45: included_from: Included from here. # 31| void *ret = malloc(size); # 32| # 33|-> if (!ret && size) # 34| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 35| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/irq-common.c:31: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘xreallocarray’ util-linux-2.40/include/xalloc.h:55:21: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’ util-linux-2.40/sys-utils/irq-common.c: scope_hint: In function ‘xreallocarray’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/sys-utils/irq-common.c:27: included_from: Included from here. util-linux-2.40/sys-utils/irq-common.c:30: included_from: Included from here. # 53| void *xreallocarray(void *ptr, const size_t nelems, const size_t size) # 54| { # 55|-> void *ret = reallocarray(ptr, nelems, size); # 56| # 57| if (!ret && size && nelems) Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘open_pidfds(n_pids, parse_pids(n_pids, argv + (long unsigned int)parse_options(argc, argv) * 8))’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘parse_pids(n_pids, argv + (long unsigned int)parse_options(argc, argv) * 8)’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/login-utils/lslogins.c:53: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 112)’ util-linux-2.40/login-utils/lslogins.c:1554:9: note: in expansion of macro ‘add_column’ util-linux-2.40/login-utils/lslogins.c: scope_hint: In function ‘main’ util-linux-2.40/login-utils/lslogins.c:1554:9: note: in expansion of macro ‘add_column’ util-linux-2.40/login-utils/lslogins.c:1555:9: note: in expansion of macro ‘add_column’ util-linux-2.40/login-utils/lslogins.c: scope_hint: In function ‘main’ util-linux-2.40/login-utils/lslogins.c:1555:9: note: in expansion of macro ‘add_column’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/lscpu.h:18: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.c:37: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 216)’ util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/sys-utils/lscpu.c: scope_hint: In function ‘main’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/kill.c:63: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘parse_arguments’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 24)’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/hardlink.c:51: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘inserter.part.0’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 240)’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/include/xalloc.h: scope_hint: In function ‘tcp_xinfo_scan_line’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 72)’ util-linux-2.40/misc-utils/lsfd.h:36: included_from: Included from here. util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘tcp_xinfo_scan_line’ util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘tcp_xinfo_scan_line’ util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘tcp_xinfo_scan_line’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/lsipc.c:39: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘main’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 8)’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/waitpid.c:34: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘open_pidfds’ util-linux-2.40/include/xalloc.h:69:13: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(n_pids, 4)’ util-linux-2.40/include/xalloc.h:20: included_from: Included from here. util-linux-2.40/include/strutils.h:51:64: note: in definition of macro ‘strtopid_or_err’ util-linux-2.40/misc-utils/waitpid.c:54:55: note: in expansion of macro ‘_’ # 67| void *ret = calloc(nelems, size); # 68| # 69|-> if (!ret && size && nelems) # 70| err(XALLOC_EXIT_CODE, "cannot allocate %zu bytes", size); # 71| return ret; Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/wall.c:70: included_from: Included from here. util-linux-2.40/include/xalloc.h: scope_hint: In function ‘xgethostname’ util-linux-2.40/include/xalloc.h:175:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc(sz)’ where non-null expected /usr/include/bits/sigstksz.h:24: included_from: Included from here. /usr/include/signal.h:328: included_from: Included from here. /usr/include/sys/param.h:28: included_from: Included from here. util-linux-2.40/term-utils/wall.c:45: included_from: Included from here. /usr/include/unistd.h:911:12: note: argument 1 of ‘gethostname’ must be non-null # 173| # 174| name = xmalloc(sizeof(char) * sz); # 175|-> if (gethostname(name, sz) != 0) { # 176| free(name); # 177| return NULL; Error: CLANG_WARNING: util-linux-2.40/lib/colors.c:302:6: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 300| /* filter out by names */ # 301| if (tk_namesz && (tk_namesz != namesz || # 302|-> strncmp(tk_name, cc->utilname, namesz) != 0)) # 303| continue; # 304| Error: CLANG_WARNING: util-linux-2.40/lib/colors.c:306:7: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 304| # 305| if (tk_termsz && (termsz == 0 || tk_termsz != termsz || # 306|-> strncmp(tk_term, cc->termname, termsz) != 0)) # 307| continue; # 308| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/lib/colors.c: scope_hint: In function 'colors_add_scheme' util-linux-2.40/lib/colors.c:393:12: warning[-Wanalyzer-malloc-leak]: leak of 'strdup(name)' util-linux-2.40/lib/colors.c:38: included_from: Included from here. util-linux-2.40/lib/colors.c:60:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/lib/colors.c:508:9: note: in expansion of macro 'DBG' util-linux-2.40/lib/colors.c:60:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/lib/colors.c:372:9: note: in expansion of macro 'DBG' # 391| cs->seq = seq; # 392| cs->name = strdup(name); # 393|-> if (!cs->name) # 394| goto err; # 395| Error: GCC_ANALYZER_WARNING: util-linux-2.40/lib/pager.c: scope_hint: In function ‘pager_close’ util-linux-2.40/lib/pager.c:309:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’ util-linux-2.40/lib/pager.c: scope_hint: In function ‘pager_close’ util-linux-2.40/lib/pager.c: scope_hint: In function ‘pager_close’ # 307| # 308| /* restore original output */ # 309|-> dup2(pager_process.org_out, STDOUT_FILENO); # 310| dup2(pager_process.org_err, STDERR_FILENO); # 311| Error: GCC_ANALYZER_WARNING: util-linux-2.40/lib/pager.c:310:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘2’ util-linux-2.40/lib/pager.c: scope_hint: In function ‘pager_close’ util-linux-2.40/lib/pager.c: scope_hint: In function ‘pager_close’ # 308| /* restore original output */ # 309| dup2(pager_process.org_out, STDOUT_FILENO); # 310|-> dup2(pager_process.org_err, STDERR_FILENO); # 311| # 312| close(pager_process.org_out); Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/lib/randutils.c: scope_hint: In function 'ul_random_get_bytes' util-linux-2.40/lib/randutils.c:143:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'random_get_fd()' util-linux-2.40/include/c.h:18: included_from: Included from here. util-linux-2.40/lib/randutils.c:19: included_from: Included from here. # 141| # 142| lose_counter = 0; # 143|-> if (fd >= 0) { # 144| while (n > 0) { # 145| ssize_t x = read(fd, cp, n); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/lib/strutils.c: scope_hint: In function 'isdigit_strend' util-linux-2.40/lib/strutils.c:234:33: warning[-Wanalyzer-null-dereference]: dereference of NULL 'p' # 232| if (end) # 233| *end = p; # 234|-> return p && p > str && !*p; # 235| } # 236| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/lib/strutils.c: scope_hint: In function ‘isdigit_strend’ util-linux-2.40/lib/strutils.c:234:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ # 232| if (end) # 233| *end = p; # 234|-> return p && p > str && !*p; # 235| } # 236| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/lib/strutils.c: scope_hint: In function 'isxdigit_strend' util-linux-2.40/lib/strutils.c:246:33: warning[-Wanalyzer-null-dereference]: dereference of NULL 'p' # 244| *end = p; # 245| # 246|-> return p && p > str && !*p; # 247| } # 248| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/lib/strutils.c: scope_hint: In function ‘isxdigit_strend’ util-linux-2.40/lib/strutils.c:246:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ # 244| *end = p; # 245| # 246|-> return p && p > str && !*p; # 247| } # 248| Error: CLANG_WARNING: util-linux-2.40/libblkid/src/dev.c:95:16: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer (loaded from variable 'p') # 93| fprintf(stderr, " dev: flags = 0x%08X\n", dev->bid_flags); # 94| # 95|-> list_for_each(p, &dev->bid_tags) { # 96| blkid_tag tag = list_entry(p, struct blkid_struct_tag, bit_tags); # 97| if (tag) Error: CLANG_WARNING: util-linux-2.40/libblkid/src/partitions/partitions.c:330:2: warning[unix.Malloc]: Use of memory after it is freed # 328| return; # 329| # 330|-> tab->nparts--; # 331| if (tab->nparts <= 0) { # 332| list_del(&tab->t_tabs); Error: GCC_ANALYZER_WARNING (CWE-416): util-linux-2.40/libblkid/src/partitions/partitions.c: scope_hint: In function 'unref_parttable' util-linux-2.40/libblkid/src/partitions/partitions.c:330:12: warning[-Wanalyzer-use-after-free]: use after 'free' of 'tab' util-linux-2.40/libblkid/src/partitions/partitions.c: scope_hint: In function 'unref_parttable' util-linux-2.40/libblkid/src/blkidP.h:30: included_from: Included from here. util-linux-2.40/libblkid/src/partitions/partitions.h:4: included_from: Included from here. util-linux-2.40/libblkid/src/partitions/partitions.c:23: included_from: Included from here. util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/partitions/partitions.c:345:39: note: in expansion of macro 'list_entry' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/partitions/partitions.c:345:39: note: in expansion of macro 'list_entry' # 328| return; # 329| # 330|-> tab->nparts--; # 331| if (tab->nparts <= 0) { # 332| list_del(&tab->t_tabs); Error: GCC_ANALYZER_WARNING (CWE-415): util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c:279:9: warning[-Wanalyzer-double-free]: double-'free' of '*v.data' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2095:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:150:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2398:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_free_value.part.0' util-linux-2.40/libblkid/src/probe.c:676:9: note: in expansion of macro 'list_for_each_safe' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:885:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:888:41: note: in expansion of macro 'list_entry' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:281:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:888:41: note: in expansion of macro 'list_entry' # 277| # 278| list_del(&v->prvals); # 279|-> free(v->data); # 280| # 281| DBG(LOWPROBE, ul_debug(" free value %s", v->name)); Error: CLANG_WARNING: util-linux-2.40/libblkid/src/probe.c:838:10: warning[unix.Malloc]: Use of memory after it is freed # 836| struct blkid_bufinfo, bufs); # 837| ct++; # 838|-> len += bf->len; # 839| # 840| remove_buffer(bf); Error: GCC_ANALYZER_WARNING (CWE-415): util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c:2565:17: warning[-Wanalyzer-double-free]: double-'free' of '((struct blkid_hint *)((char *)MEM[(struct list_head *)pr_9(D) + 128B].next + 16))[576460752303423487].name' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2095:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:150:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2398:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c:676:9: note: in expansion of macro 'list_for_each_safe' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:2562:40: note: in expansion of macro 'list_entry' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:2562:40: note: in expansion of macro 'list_entry' # 2563| struct blkid_hint, hints); # 2564| list_del(&h->hints); # 2565|-> free(h->name); # 2566| free(h); # 2567| } Error: GCC_ANALYZER_WARNING (CWE-415): util-linux-2.40/libblkid/src/probe.c:2566:17: warning[-Wanalyzer-double-free]: double-'free' of '((struct list_head *)pr)[8].next + -16' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2095:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:150:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2398:17: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints' util-linux-2.40/libblkid/src/probe.c:676:9: note: in expansion of macro 'list_for_each_safe' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/libblkid/src/blkidP.h:354:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libblkid/src/probe.c:2559:9: note: in expansion of macro 'DBG' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:2562:40: note: in expansion of macro 'list_entry' util-linux-2.40/include/list.h:176:41: note: in expansion of macro 'container_of' util-linux-2.40/libblkid/src/probe.c:2562:40: note: in expansion of macro 'list_entry' # 2564| list_del(&h->hints); # 2565| free(h->name); # 2566|-> free(h); # 2567| } # 2568| Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/libblkid/src/topology/dm.c: scope_hint: In function 'probe_dm_tp' util-linux-2.40/libblkid/src/topology/dm.c:118:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dmpipe[0]' # 116| # 117| fclose(stream); # 118|-> return 0; # 119| # 120| nothing: Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/libblkid/src/topology/dm.c:118:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dmpipe[1]' # 116| # 117| fclose(stream); # 118|-> return 0; # 119| # 120| nothing: Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/libblkid/src/topology/lvm.c: scope_hint: In function 'probe_lvm_tp' util-linux-2.40/libblkid/src/topology/lvm.c:125:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'lvpipe[0]' # 123| fclose(stream); # 124| close(lvpipe[1]); # 125|-> return 0; # 126| # 127| nothing: Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/libblkid/src/topology/lvm.c:125:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'lvpipe[1]' # 123| fclose(stream); # 124| close(lvpipe[1]); # 125|-> return 0; # 126| # 127| nothing: Error: CLANG_WARNING: util-linux-2.40/libfdisk/src/dos.c:2151:18: warning[core.NullDereference]: Access to field 'nparts_max' results in a dereference of a null pointer (loaded from field 'label') # 2149| # 2150| /* EBR (logical partitions) */ # 2151|-> for (i = 4; i < cxt->label->nparts_max; i++) { # 2152| struct pte *pe = self_pte(cxt, i); # 2153| Error: CLANG_WARNING: util-linux-2.40/libfdisk/src/script.c:179:3: warning[unix.Malloc]: Use of memory after it is freed # 177| struct fdisk_scriptheader *fi = list_entry(dp->headers.next, # 178| struct fdisk_scriptheader, headers); # 179|-> fdisk_script_free_header(fi); # 180| } # 181| INIT_LIST_HEAD(&dp->headers); Error: CLANG_WARNING: util-linux-2.40/libfdisk/src/script.c:1627:2: warning[unix.Malloc]: Use of memory after it is freed # 1625| rc = fdisk_apply_table(cxt, dp->table); # 1626| # 1627|-> fdisk_set_script(cxt, old); # 1628| fdisk_unref_script(old); # 1629| Error: CLANG_WARNING: util-linux-2.40/libfdisk/src/wipe.c:40:17: warning[unix.Malloc]: Use of memory after it is freed # 38| struct fdisk_wipe, wipes); # 39| DBG(WIPE, ul_debugobj(wp, "free [start=%ju, size=%ju]", # 40|-> (uintmax_t) wp->start, (uintmax_t) wp->size)); # 41| list_del(&wp->wipes); # 42| free(wp); Error: CLANG_WARNING: util-linux-2.40/libmount/src/context_mount.c:553:17: warning[unix.Malloc]: Potential leak of memory pointed to by 'org_type' # 551| org_type = NULL; # 552| # 553|-> if (rc == 0 && try_type && cxt->update) { # 554| struct libmnt_fs *fs = mnt_update_get_fs(cxt->update); # 555| if (fs) Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libmount/src/hook_idmap.c: scope_hint: In function 'hook_prepare_options' util-linux-2.40/libmount/src/hook_idmap.c:457:25: warning[-Wanalyzer-malloc-leak]: leak of 'idmap' util-linux-2.40/libmount/src/mountP.h:28: included_from: Included from here. util-linux-2.40/libmount/src/hook_idmap.c:30: included_from: Included from here. util-linux-2.40/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD' util-linux-2.40/libmount/src/hook_idmap.c:25: included_from: Included from here. # 455| goto err; # 456| # 457|-> idmap = calloc(1, sizeof(*idmap)); # 458| if (!idmap) # 459| goto err; Error: CLANG_WARNING: util-linux-2.40/libmount/src/hook_mount.c:429:3: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 427| if (rc < 0) # 428| return rc; # 429|-> rc = 0; # 430| } # 431| Error: GCC_ANALYZER_WARNING (CWE-416): util-linux-2.40/libmount/src/utils.c: scope_hint: In function 'mnt_free_filesystems.part.0' util-linux-2.40/libmount/src/utils.c:505:31: warning[-Wanalyzer-use-after-free]: use after 'reallocarray' of 'p' util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/strutils.h:17: included_from: Included from here. util-linux-2.40/libmount/src/utils.c:24: included_from: Included from here. # 503| if (!filesystems) # 504| return; # 505|-> for (p = filesystems; *p; p++) # 506| free(*p); # 507| free(filesystems); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libsmartcols/src/filter-parser.c: scope_hint: In function 'yyparse' util-linux-2.40/libsmartcols/src/filter-parser.c:392:21: warning[-Wanalyzer-malloc-leak]: leak of 'yyptr' util-linux-2.40/libsmartcols/src/filter-parser.c:95:40: note: in definition of macro 'YY_CAST' util-linux-2.40/libsmartcols/src/filter-parser.c:378:25: note: in expansion of macro 'YYMALLOC' util-linux-2.40/libsmartcols/src/filter-parser.c:1284:20: note: in expansion of macro 'YYSTACK_ALLOC' util-linux-2.40/libsmartcols/src/filter-parser.c:1354:17: note: in expansion of macro 'YYTRANSLATE' util-linux-2.40/libsmartcols/src/filter-parser.c:95:40: note: in definition of macro 'YY_CAST' util-linux-2.40/libsmartcols/src/filter-parser.c:378:25: note: in expansion of macro 'YYMALLOC' util-linux-2.40/libsmartcols/src/filter-parser.c:1284:20: note: in expansion of macro 'YYSTACK_ALLOC' util-linux-2.40/libsmartcols/src/filter-parser.c:437:9: note: in expansion of macro 'YYCOPY' util-linux-2.40/libsmartcols/src/filter-parser.c:1287:9: note: in expansion of macro 'YYSTACK_RELOCATE' util-linux-2.40/libsmartcols/src/filter-parser.c:95:40: note: in definition of macro 'YY_CAST' util-linux-2.40/libsmartcols/src/filter-parser.c:378:25: note: in expansion of macro 'YYMALLOC' util-linux-2.40/libsmartcols/src/filter-parser.c:1284:20: note: in expansion of macro 'YYSTACK_ALLOC' # 390| # endif # 391| # ifndef YYMALLOC # 392|-> # define YYMALLOC malloc # 393| # if ! defined malloc && ! defined EXIT_SUCCESS # 394| void *malloc (YYSIZE_T); /* INFRINGES ON USER NAME SPACE */ Error: GCC_ANALYZER_WARNING (CWE-457): util-linux-2.40/libsmartcols/src/filter-parser.c:452:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'yyss' util-linux-2.40/libsmartcols/src/filter-parser.c:437:9: note: in expansion of macro 'YYCOPY' util-linux-2.40/libsmartcols/src/filter-parser.c:1287:9: note: in expansion of macro 'YYSTACK_RELOCATE' util-linux-2.40/libsmartcols/src/filter-parser.c:437:9: note: in expansion of macro 'YYCOPY' util-linux-2.40/libsmartcols/src/filter-parser.c:1287:9: note: in expansion of macro 'YYSTACK_RELOCATE' util-linux-2.40/libsmartcols/src/filter-parser.c:437:9: note: in expansion of macro 'YYCOPY' util-linux-2.40/libsmartcols/src/filter-parser.c:1287:9: note: in expansion of macro 'YYSTACK_RELOCATE' # 450| # if defined __GNUC__ && 1 < __GNUC__ # 451| # define YYCOPY(Dst, Src, Count) \ # 452|-> __builtin_memcpy (Dst, Src, YY_CAST (YYSIZE_T, (Count)) * sizeof (*(Src))) # 453| # else # 454| # define YYCOPY(Dst, Src, Count) \ Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_create_buffer' util-linux-2.40/libsmartcols/src/filter-scanner.c:1453:12: warning[-Wanalyzer-malloc-leak]: leak of 'malloc(64)' util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_create_buffer' # 1451| * we need to put in 2 end-of-buffer characters. # 1452| */ # 1453|-> b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 1454| if ( ! b->yy_ch_buf ) # 1455| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_create_buffer' util-linux-2.40/libsmartcols/src/filter-scanner.c:1453:12: warning[-Wanalyzer-malloc-leak]: leak of 'yyalloc(64, yyscanner)' # 1451| * we need to put in 2 end-of-buffer characters. # 1452| */ # 1453|-> b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 1454| if ( ! b->yy_ch_buf ) # 1455| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_init_buffer' util-linux-2.40/libsmartcols/src/filter-scanner.c:1495:19: warning[-Wanalyzer-null-dereference]: dereference of NULL 'b' # 1493| # 1494| yy_flush_buffer( b , yyscanner); # 1495|-> # 1496| b->yy_input_file = file; # 1497| b->yy_fill_buffer = 1; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_scan_buffer' util-linux-2.40/libsmartcols/src/filter-scanner.c:1713:25: warning[-Wanalyzer-malloc-leak]: leak of 'malloc(n)' util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_scan_buffer' # 1711| for ( i = 0; i < _yybytes_len; ++i ) # 1712| buf[i] = yybytes[i]; # 1713|-> # 1714| buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 1715| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/libsmartcols/src/filter-scanner.c: scope_hint: In function 'yy_scan_buffer' util-linux-2.40/libsmartcols/src/filter-scanner.c:1713:25: warning[-Wanalyzer-malloc-leak]: leak of 'yyalloc(n, yyscanner)' # 1711| for ( i = 0; i < _yybytes_len; ++i ) # 1712| buf[i] = yybytes[i]; # 1713|-> # 1714| buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 1715| Error: CLANG_WARNING: util-linux-2.40/libsmartcols/src/filter.c:97:44: warning[unix.Malloc]: Use of memory after it is freed # 95| struct libscols_counter, counters); # 96| # 97|-> filter_unref_node((struct filter_node *) ct->param); # 98| list_del_init(&ct->counters); # 99| free(ct->name); Error: CLANG_WARNING: util-linux-2.40/libsmartcols/src/grouping.c:54:3: warning[unix.Malloc]: Use of memory after it is freed # 52| # 53| scols_unref_group(ln->group); # 54|-> ln->group->nmembers++; # 55| ln->group = NULL; # 56| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/libsmartcols/src/print.c: scope_hint: In function 'print_json_data' util-linux-2.40/libsmartcols/src/print.c:491:71: warning[-Wanalyzer-null-dereference]: dereference of NULL 'data' util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:14: included_from: Included from here. util-linux-2.40/libsmartcols/src/print.c:26: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:19: included_from: Included from here. util-linux-2.40/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libsmartcols/src/print.c:790:9: note: in expansion of macro 'DBG' # 489| case SCOLS_JSON_BOOLEAN_OPTIONAL: # 490| /* name: true|false|null */ # 491|-> if (cl->json_type == SCOLS_JSON_BOOLEAN_OPTIONAL && (!*data || !strcmp(data, "-"))) { # 492| ul_jsonwrt_value_null(&tb->json, name); # 493| } else { Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/libsmartcols/src/print.c:495:42: warning[-Wanalyzer-null-dereference]: dereference of NULL 'data' util-linux-2.40/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG' util-linux-2.40/libsmartcols/src/print.c:790:9: note: in expansion of macro 'DBG' # 493| } else { # 494| ul_jsonwrt_value_boolean(&tb->json, name, # 495|-> !*data ? 0 : # 496| *data == '0' ? 0 : # 497| *data == 'N' || *data == 'n' ? 0 : 1); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/login-utils/chfn.c: scope_hint: In function ‘parse_passwd’ util-linux-2.40/login-utils/chfn.c:216:1: warning[-Wanalyzer-malloc-leak]: leak of ‘gecos’ util-linux-2.40/login-utils/chfn.c:42: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/login-utils/chfn.c:35: included_from: Included from here. # 214| * not be changed by this version of chfn. */ # 215| ctl->oldf.other = strsep(&gecos, ","); # 216|-> } # 217| # 218| /* Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:465:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.oldf.full_name' # 463| #if !defined(HAVE_LIBUSER) && defined(CHFN_CHSH_PASSWORD) # 464| if (!auth_pam("chfn", uid, ctl.username)) { # 465|-> return EXIT_FAILURE; # 466| } # 467| #endif Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:475:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.newf.full_name' # 473| # 474| if (!ctl.changed) { # 475|-> printf(_("Finger information not changed.\n")); # 476| return EXIT_SUCCESS; # 477| } Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:475:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.newf.home_phone' # 473| # 474| if (!ctl.changed) { # 475|-> printf(_("Finger information not changed.\n")); # 476| return EXIT_SUCCESS; # 477| } Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:475:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.newf.office' # 473| # 474| if (!ctl.changed) { # 475|-> printf(_("Finger information not changed.\n")); # 476| return EXIT_SUCCESS; # 477| } Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:475:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.newf.office_phone' # 473| # 474| if (!ctl.changed) { # 475|-> printf(_("Finger information not changed.\n")); # 476| return EXIT_SUCCESS; # 477| } Error: CLANG_WARNING: util-linux-2.40/login-utils/chfn.c:475:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.newf.other' # 473| # 474| if (!ctl.changed) { # 475|-> printf(_("Finger information not changed.\n")); # 476| return EXIT_SUCCESS; # 477| } Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/login-utils/last.c: scope_hint: In function ‘process_wtmp_file’ util-linux-2.40/login-utils/last.c:194:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(filename, "r")’ util-linux-2.40/login-utils/last.c:49: included_from: Included from here. util-linux-2.40/include/optutils.h:8: included_from: Included from here. util-linux-2.40/login-utils/last.c:47: included_from: Included from here. # 192| off_t o; # 193| # 194|-> if (quit == NULL && u != NULL) { # 195| /* # 196| * Normal read. Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/login-utils/last.c:194:18: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(filename, "r")’ # 192| off_t o; # 193| # 194|-> if (quit == NULL && u != NULL) { # 195| /* # 196| * Normal read. Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/login-utils/last.c: scope_hint: In function ‘main’ util-linux-2.40/login-utils/last.c:1028:41: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘files’ # 1026| if (!files) # 1027| files = xmalloc(sizeof(char *) * argc); # 1028|-> files[nfiles++] = xstrdup(optarg); # 1029| break; # 1030| case 'd': Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/login-utils/login.c: scope_hint: In function ‘process_title_init’ util-linux-2.40/login-utils/login.c:239:28: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘environ’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/path.h:14: included_from: Included from here. util-linux-2.40/login-utils/login.c:49: included_from: Included from here. # 237| # 238| for (i = 0; envp[i] != NULL; i++) # 239|-> environ[i] = xstrdup(envp[i]); # 240| environ[i] = NULL; # 241| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/login-utils/login.c:240:20: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘environ’ # 238| for (i = 0; envp[i] != NULL; i++) # 239| environ[i] = xstrdup(envp[i]); # 240|-> environ[i] = NULL; # 241| # 242| if (i > 0) Error: GCC_ANALYZER_WARNING (CWE-1341): util-linux-2.40/login-utils/login.c: scope_hint: In function ‘open_tty’ util-linux-2.40/login-utils/login.c:455:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘i’ util-linux-2.40/login-utils/login.c:36: included_from: Included from here. # 453| # 454| for (i = 0; i < fd; i++) # 455|-> close(i); # 456| for (i = 0; i < 3; i++) # 457| if (fd != i) Error: GCC_ANALYZER_WARNING: util-linux-2.40/login-utils/login.c:458:25: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘i’ # 456| for (i = 0; i < 3; i++) # 457| if (fd != i) # 458|-> dup2(fd, i); # 459| if (fd >= 3) # 460| close(fd); Error: CLANG_WARNING: util-linux-2.40/login-utils/login.c:1248:2: warning[unix.Malloc]: Potential memory leak # 1246| cxt->hostname = xstrdup(remotehost); # 1247| # 1248|-> memset(&hints, 0, sizeof(hints)); # 1249| hints.ai_flags = AI_ADDRCONFIG; # 1250| cxt->hostaddress[0] = 0; Error: CLANG_WARNING: util-linux-2.40/login-utils/login.c:1383:2: warning[deadcode.DeadStores]: Value stored to 'argc' is never read # 1381| errtryhelp(EXIT_FAILURE); # 1382| } # 1383|-> argc -= optind; # 1384| argv += optind; # 1385| Error: CLANG_WARNING: util-linux-2.40/login-utils/lslogins.c:509:10: warning[core.NullDereference]: Array access (from variable 'ary') results in a null pointer dereference # 507| if (i == imax) # 508| ary = xreallocarray(ary, imax *= 2, sizeof(struct utmpx)); # 509|-> ary[i] = *u; # 510| } # 511| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/login-utils/lslogins.c: scope_hint: In function ‘parse_utmpx.part.0’ util-linux-2.40/login-utils/lslogins.c:509:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ary’ # 507| if (i == imax) # 508| ary = xreallocarray(ary, imax *= 2, sizeof(struct utmpx)); # 509|-> ary[i] = *u; # 510| } # 511| Error: CLANG_WARNING: util-linux-2.40/login-utils/sulogin-consoles.c:694:4: warning[deadcode.DeadStores]: Value stored to 'comparedev' is never read # 692| goto fallback; # 693| } # 694|-> comparedev = makedev(TTY_MAJOR, (int)vt.v_active); # 695| } # 696| #endif Error: GCC_ANALYZER_WARNING: util-linux-2.40/login-utils/sulogin.c: scope_hint: In function ‘setup’ util-linux-2.40/login-utils/sulogin.c:723:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘0’ # 721| } # 722| notty: # 723|-> dup2(fd, STDIN_FILENO); # 724| dup2(fd, STDOUT_FILENO); # 725| dup2(fd, STDERR_FILENO); Error: GCC_ANALYZER_WARNING: util-linux-2.40/login-utils/sulogin.c:724:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’ # 722| notty: # 723| dup2(fd, STDIN_FILENO); # 724|-> dup2(fd, STDOUT_FILENO); # 725| dup2(fd, STDERR_FILENO); # 726| con->fd = STDIN_FILENO; Error: GCC_ANALYZER_WARNING: util-linux-2.40/login-utils/sulogin.c:725:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘2’ # 723| dup2(fd, STDIN_FILENO); # 724| dup2(fd, STDOUT_FILENO); # 725|-> dup2(fd, STDERR_FILENO); # 726| con->fd = STDIN_FILENO; # 727| Error: CLANG_WARNING: util-linux-2.40/login-utils/sulogin.c:1022:7: warning[deadcode.DeadStores]: Although the value stored to 'pid' is used in the enclosing expression, the value is never actually read from 'pid' # 1020| * If we are init we need to set up an own session. # 1021| */ # 1022|-> if ((pid = getpid()) == 1) { # 1023| setsid(); # 1024| ignore_result( ioctl(STDIN_FILENO, TIOCSCTTY, (char *) 1) ); Error: CLANG_WARNING: util-linux-2.40/misc-utils/blkid.c:749:18: warning[unix.Malloc]: Potential leak of memory pointed to by 'search_value' # 747| ctl.eval = 1; # 748| search_value = xstrdup(optarg); # 749|-> search_type = xstrdup("UUID"); # 750| break; # 751| case 'i': Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/blkid.c: scope_hint: In function ‘main’ util-linux-2.40/misc-utils/blkid.c:859:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)(argc - optind), 8) + (long unsigned int)numdev * 8’ util-linux-2.40/misc-utils/blkid.c:47: included_from: Included from here. util-linux-2.40/misc-utils/blkid.c:17: included_from: Included from here. # 857| continue; # 858| # 859|-> devices[numdev++] = dev; # 860| } # 861| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/cal.c: scope_hint: In function ‘monthly’ util-linux-2.40/misc-utils/cal.c:1016:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)*ctl.months_in_row, 208)’ util-linux-2.40/misc-utils/cal.c:79: included_from: Included from here. # 1014| # 1015| for (i = 0; i < ctl->months_in_row - 1; i++) # 1016|-> ms[i].next = &ms[i + 1]; # 1017| # 1018| rows = (ctl->num_months - 1) / ctl->months_in_row; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/getopt.c: scope_hint: In function ‘print_normalized.part.0’ util-linux-2.40/misc-utils/getopt.c:133:24: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc(strlen(arg) * 4 + 3)’ util-linux-2.40/misc-utils/getopt.c:73: included_from: Included from here. # 131| bufptr = buf; # 132| # 133|-> for (*bufptr++ = '\''; *argptr; argptr++) { # 134| if (ctl->shell == TCSH) { # 135| switch (*argptr) { Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/getopt.c: scope_hint: In function ‘main’ util-linux-2.40/misc-utils/getopt.c:418:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘ctl.optstr’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_strcpy’ must be non-null # 416| ctl.quote = 0; # 417| ctl.optstr = xmalloc(strlen(argv[1]) + 1); # 418|-> strcpy(ctl.optstr, argv[1] + strspn(argv[1], "-+")); # 419| argv[1] = argv[0]; # 420| return generate_output(&ctl, argv + 1, argc - 1); Error: CLANG_WARNING: util-linux-2.40/misc-utils/getopt.c:449:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.name' # 447| break; # 448| case 'T': # 449|-> free(ctl.long_options); # 450| return TEST_EXIT_CODE; # 451| case 'u': Error: CLANG_WARNING: util-linux-2.40/misc-utils/getopt.c:449:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.optstr' # 447| break; # 448| case 'T': # 449|-> free(ctl.long_options); # 450| return TEST_EXIT_CODE; # 451| case 'u': Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/hardlink.c: scope_hint: In function ‘get_sorted_xattr_name_table’ util-linux-2.40/misc-utils/hardlink.c:515:26: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc((long unsigned int)n * 8)’ util-linux-2.40/misc-utils/hardlink.c: scope_hint: In function ‘get_sorted_xattr_name_table’ # 513| # 514| for (i = 0; i < n; i++) { # 515|-> table[i] = names; # 516| names += strlen(names) + 1; # 517| } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/hardlink.c:519:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc((long unsigned int)n * 8)’ where non-null expected util-linux-2.40/misc-utils/hardlink.c: scope_hint: In function ‘get_sorted_xattr_name_table’ util-linux-2.40/include/c.h:16: included_from: Included from here. util-linux-2.40/misc-utils/hardlink.c:50: included_from: Included from here. /usr/include/stdlib.h:970:13: note: argument 1 of ‘qsort’ must be non-null # 517| } # 518| # 519|-> qsort(table, n, sizeof(char *), cmp_xattr_name_ptrs); # 520| # 521| return table; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/hardlink.c: scope_hint: In function ‘inserter.part.0’ util-linux-2.40/misc-utils/hardlink.c:875:30: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xcalloc(1, strlen(fpath) + 17)’ # 873| # 874| fil->st = *sb; # 875|-> fil->links->basename = ftwbuf->base; # 876| fil->links->dirname = rootbasesz; # 877| fil->links->next = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/look.c: scope_hint: In function ‘compare’ util-linux-2.40/misc-utils/look.c:337:30: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘p’ util-linux-2.40/misc-utils/look.c:61: included_from: Included from here. util-linux-2.40/misc-utils/look.c:57: included_from: Included from here. # 335| if (!dflag || isalnum(*s2) || isblank(*s2)) # 336| { # 337|-> *p++ = *s2; # 338| i--; # 339| } Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/look.c:342:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘p’ # 340| s2++; # 341| } # 342|-> *p = 0; # 343| # 344| /* and compare */ Error: CLANG_WARNING: util-linux-2.40/misc-utils/lsblk-devtree.c:85:3: warning[unix.Malloc]: Use of memory after it is freed # 83| struct lsblk_devdep *dp = list_entry(dev->childs.next, # 84| struct lsblk_devdep, ls_childs); # 85|-> remove_dependence(dp); # 86| } # 87| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/lsblk.h:17: included_from: Included from here. util-linux-2.40/misc-utils/lsblk-devtree.c:19: included_from: Included from here. util-linux-2.40/misc-utils/lsblk-devtree.c: scope_hint: In function ‘cmp_devices_devno’ util-linux-2.40/misc-utils/lsblk-devtree.c:536:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘a’ util-linux-2.40/include/c.h:172:29: note: in definition of macro ‘cmp_numbers’ util-linux-2.40/misc-utils/lsblk.h:18: included_from: Included from here. util-linux-2.40/include/c.h:172:29: note: in definition of macro ‘cmp_numbers’ # 534| *bx = list_entry(b, struct lsblk_device, ls_devices); # 535| # 536|-> return cmp_numbers(makedev(ax->maj, ax->min), # 537| makedev(bx->maj, bx->min)); # 538| } Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/lsblk-properties.c: scope_hint: In function ‘lookup.part.0’ util-linux-2.40/misc-utils/lsblk-properties.c:199:16: warning[-Wanalyzer-malloc-leak]: leak of ‘*prop.label’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/misc-utils/lsblk-properties.c:8: included_from: Included from here. util-linux-2.40/misc-utils/lsblk-properties.c: scope_hint: In function ‘lookup.part.0’ util-linux-2.40/misc-utils/lsblk-properties.c:9: included_from: Included from here. # 197| *p = '\0'; # 198| # 199|-> *value = xstrdup(v); # 200| return 1; # 201| } Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘load_xinfo_from_proc_unix’ util-linux-2.40/misc-utils/lsfd-sock-xinfo.c:678:17: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 152)’ # 676| xstrncpy(ux->path, path, sizeof(ux->path)); # 677| # 678|-> add_sock_info(&ux->sock); # 679| } # 680| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘load_xinfo_from_proc_netlink’ util-linux-2.40/misc-utils/lsfd-sock-xinfo.c:1905:17: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 40)’ # 1903| nl->groups = groups; # 1904| # 1905|-> add_sock_info(&nl->sock); # 1906| } # 1907| Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/misc-utils/lsfd-sock-xinfo.c: scope_hint: In function ‘load_xinfo_from_proc_packet’ util-linux-2.40/misc-utils/lsfd-sock-xinfo.c:2307:17: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(1, 32)’ # 2305| pkt->iface = iface; # 2306| # 2307|-> add_sock_info(&pkt->sock); # 2308| } # 2309| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘new_file’ util-linux-2.40/misc-utils/lsfd.c:692:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xcalloc(1, *class.size)’ util-linux-2.40/misc-utils/lsfd.c:810:16: note: in expansion of macro ‘list_last_entry’ # 690| assert(class); # 691| file = xcalloc(1, class->size); # 692|-> file->class = class; # 693| # 694| file->proc = proc; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘copy_file’ util-linux-2.40/misc-utils/lsfd.c:707:20: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xcalloc(1, *old_10(D)->class.size)’ util-linux-2.40/misc-utils/lsfd.c:810:16: note: in expansion of macro ‘list_last_entry’ util-linux-2.40/misc-utils/lsfd.c:810:16: note: in expansion of macro ‘list_last_entry’ # 705| # 706| INIT_LIST_HEAD(&file->files); # 707|-> file->proc = old->proc; # 708| list_add_tail(&file->files, &old->proc->files); # 709| Error: CLANG_WARNING: util-linux-2.40/misc-utils/lsfd.c:1805:6: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'next') # 1803| && (isspace((unsigned char)*next) || *next == ',')) # 1804| next++; # 1805|-> if (*next != '\0') # 1806| parse_pids(next, pids, count); # 1807| } Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/lsfd.c: scope_hint: In function ‘parse_pids’ util-linux-2.40/misc-utils/lsfd.c:1805:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘outarg’ util-linux-2.40/include/c.h:18: included_from: Included from here. # 1803| && (isspace((unsigned char)*next) || *next == ',')) # 1804| next++; # 1805|-> if (*next != '\0') # 1806| parse_pids(next, pids, count); # 1807| } Error: CLANG_WARNING: util-linux-2.40/misc-utils/lslocks.c:244:7: warning[deadcode.DeadStores]: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz' # 242| return NULL; # 243| # 244|-> if ((sz = strlen(path)) >= (sizeof(path) - 2)) # 245| goto out; # 246| Error: CLANG_WARNING: util-linux-2.40/misc-utils/lslocks.c:305:3: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 303| l->mandatory == m->mandatory && # 304| l->blocked == m->blocked && # 305|-> strcmp(l->type, m->type) == 0 && # 306| strcmp(l->mode, m->mode) == 0); # 307| } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/lslocks.c: scope_hint: In function ‘is_holder’ util-linux-2.40/misc-utils/lslocks.c:305:17: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected util-linux-2.40/misc-utils/lslocks.c:46: included_from: Included from here. util-linux-2.40/misc-utils/lslocks.c:944:9: note: in expansion of macro ‘INIT_LIST_HEAD’ util-linux-2.40/misc-utils/lslocks.c:43: included_from: Included from here. util-linux-2.40/include/list.h:190:21: note: in definition of macro ‘list_for_each’ util-linux-2.40/misc-utils/lslocks.c:318:9: note: in expansion of macro ‘list_for_each’ util-linux-2.40/misc-utils/lslocks.c:26: included_from: Included from here. /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 303| l->mandatory == m->mandatory && # 304| l->blocked == m->blocked && # 305|-> strcmp(l->type, m->type) == 0 && # 306| strcmp(l->mode, m->mode) == 0); # 307| } Error: CLANG_WARNING: util-linux-2.40/misc-utils/lslocks.c:306:3: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 304| l->blocked == m->blocked && # 305| strcmp(l->type, m->type) == 0 && # 306|-> strcmp(l->mode, m->mode) == 0); # 307| } # 308| Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/misc-utils/mcookie.c: scope_hint: In function ‘randomness_from_files’ util-linux-2.40/misc-utils/mcookie.c:117:35: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’ # 115| int fd; # 116| # 117|-> if (*fname == '-' && !*(fname + 1)) # 118| fd = STDIN_FILENO; # 119| else Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/misc-utils/mcookie.c:136:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’ # 134| } # 135| } # 136|-> } # 137| # 138| int main(int argc, char **argv) Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/mcookie.c: scope_hint: In function ‘main’ util-linux-2.40/misc-utils/mcookie.c:168:49: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ctl.files’ util-linux-2.40/misc-utils/mcookie.c:31: included_from: Included from here. # 166| if (!ctl.files) # 167| ctl.files = xmalloc(sizeof(char *) * argc); # 168|-> ctl.files[ctl.nfiles++] = optarg; # 169| break; # 170| case 'm': Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/namei.c: scope_hint: In function ‘readlink_to_namei’ util-linux-2.40/misc-utils/namei.c:115:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc((long unsigned int)(sz + 1))’ where non-null expected util-linux-2.40/misc-utils/namei.c:39: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/misc-utils/namei.c:38: included_from: Included from here. util-linux-2.40/misc-utils/namei.c:29: included_from: Included from here. <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 113| if (isrel) { # 114| /* create the absolute path from the relative symlink */ # 115|-> memcpy(nm->abslink, path, nm->relstart); # 116| *(nm->abslink + nm->relstart) = '/'; # 117| nm->relstart++; Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/namei.c:123:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc((long unsigned int)(sz + 1))’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 121| * - or link without any subdir (foo -> bar) # 122| */ # 123|-> memcpy(nm->abslink, sym, sz); # 124| # 125| nm->abslink[sz] = '\0'; Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/namei.c: scope_hint: In function ‘dotdot_stat’ util-linux-2.40/misc-utils/namei.c:142:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc(len + 4)’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 140| path = xmalloc(len + sizeof(DOTDOTDIR)); # 141| # 142|-> memcpy(path, dirname, len); # 143| memcpy(path + len, DOTDOTDIR, sizeof(DOTDOTDIR)); # 144| Error: CLANG_WARNING: util-linux-2.40/misc-utils/namei.c:271:7: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value # 269| next = nm->next; # 270| nm->next = add_namei(nm, nm->abslink, nm->relstart, &last); # 271|-> if (last) # 272| last->next = next; # 273| else Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/rename.c: scope_hint: In function ‘string_replace’ util-linux-2.40/misc-utils/rename.c:91:30: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘q’ util-linux-2.40/misc-utils/rename.c:38: included_from: Included from here. # 89| while (count--) { # 90| while (p < where) # 91|-> *q++ = *p++; # 92| p = to; # 93| while (*p) Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/rename.c:94:30: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘q’ # 92| p = to; # 93| while (*p) # 94|-> *q++ = *p++; # 95| if (fromlen > 0) { # 96| p = where + fromlen; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/rename.c:104:22: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘q’ util-linux-2.40/misc-utils/rename.c:35: included_from: Included from here. util-linux-2.40/misc-utils/rename.c:31: included_from: Included from here. # 102| } # 103| while (*p) # 104|-> *q++ = *p++; # 105| *q = 0; # 106| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/rename.c:105:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘q’ # 103| while (*p) # 104| *q++ = *p++; # 105|-> *q = 0; # 106| return 0; # 107| } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/rename.c: scope_hint: In function ‘do_symlink’ util-linux-2.40/misc-utils/rename.c:169:15: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc((long unsigned int)(sb.st_size + 1))’ where non-null expected util-linux-2.40/misc-utils/rename.c:32: included_from: Included from here. /usr/include/unistd.h:838:16: note: argument 2 of ‘readlink’ must be non-null # 167| target = xmalloc(sb.st_size + 1); # 168| # 169|-> ssz = readlink(s, target, sb.st_size + 1); # 170| if (ssz < 0) { # 171| warn(_("%s: readlink failed"), s); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/waitpid.c: scope_hint: In function ‘parse_pids’ util-linux-2.40/misc-utils/waitpid.c:54:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc(n_strings, 4)’ util-linux-2.40/include/strutils.h:51:64: note: in definition of macro ‘strtopid_or_err’ util-linux-2.40/misc-utils/waitpid.c:54:55: note: in expansion of macro ‘_’ # 52| # 53| for (size_t i = 0; i < n_strings; i++) # 54|-> pids[i] = strtopid_or_err(strings[i], _("failed to parse pid")); # 55| # 56| return pids; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/misc-utils/waitpid.c: scope_hint: In function ‘open_pidfds’ util-linux-2.40/misc-utils/waitpid.c:64:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc(n_pids, 4) + i * 4’ util-linux-2.40/include/strutils.h:51:64: note: in definition of macro ‘strtopid_or_err’ util-linux-2.40/misc-utils/waitpid.c:54:55: note: in expansion of macro ‘_’ # 62| # 63| for (size_t i = 0; i < n_pids; i++) { # 64|-> pidfds[i] = pidfd_open(pids[i], 0); # 65| if (pidfds[i] == -1) { # 66| if (allow_exited && errno == ESRCH) { Error: CLANG_WARNING: util-linux-2.40/misc-utils/waitpid.c:253:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'pidfds' # 251| active_pids = min(active_pids, count); # 252| wait_for_exits(epoll, active_pids, pids, pidfds); # 253|-> } Error: CLANG_WARNING: util-linux-2.40/misc-utils/waitpid.c:253:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'pids' # 251| active_pids = min(active_pids, count); # 252| wait_for_exits(epoll, active_pids, pids, pidfds); # 253|-> } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/misc-utils/wipefs.c: scope_hint: In function ‘get_desc_for_probe’ util-linux-2.40/misc-utils/wipefs.c:350:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc(*len)’ where non-null expected util-linux-2.40/misc-utils/wipefs.c:38: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/xalloc.h:19: included_from: Included from here. <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 348| # 349| wp->magic = xmalloc(*len); # 350|-> memcpy(wp->magic, mag, *len); # 351| wp->len = *len; # 352| Error: CLANG_WARNING: util-linux-2.40/misc-utils/wipefs.c:837:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.offsets' # 835| } # 836| } # 837|-> free(ctl.reread); # 838| #endif # 839| } Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/blkpr.c: scope_hint: In function ‘do_pr’ util-linux-2.40/sys-utils/blkpr.c:166:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(path, 2)’ # 164| err(EXIT_FAILURE, _("cannot open %s"), path); # 165| # 166|-> switch (op) { # 167| case IOC_PR_REGISTER: # 168| pr_reg.old_key = oldkey; Error: CLANG_WARNING: util-linux-2.40/sys-utils/chmem.c:398:14: warning[unix.Malloc]: Potential leak of memory pointed to by 'zone' # 396| read_info(desc); # 397| # 398|-> while ((c = getopt_long(argc, argv, "bdehvVz:", longopts, NULL)) != -1) { # 399| # 400| err_exclusive_options(c, longopts, excl, excl_st); Error: CLANG_WARNING: util-linux-2.40/sys-utils/eject.c:863:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.device' # 861| /* handle -d option */ # 862| if (ctl.d_option) { # 863|-> info(_("default device: `%s'"), EJECT_DEFAULT_DEVICE); # 864| return EXIT_SUCCESS; # 865| } Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/hwclock-rtc.c: scope_hint: In function ‘set_param_rtc’ util-linux-2.40/sys-utils/hwclock-rtc.c:418:21: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(opt0)’ util-linux-2.40/sys-utils/hwclock-rtc.c:26: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/strutils.h:17: included_from: Included from here. util-linux-2.40/sys-utils/hwclock-rtc.c:25: included_from: Included from here. util-linux-2.40/sys-utils/hwclock-rtc.c: scope_hint: In function ‘set_param_rtc’ util-linux-2.40/sys-utils/hwclock-rtc.c: scope_hint: In function ‘set_param_rtc’ # 416| const struct hwclock_param *param = &hwclock_params[0]; # 417| # 418|-> while (param->name) { # 419| if (!strcmp(alias, param->name)) { # 420| *value = param->id; Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/sys-utils/hwclock-rtc.c: scope_hint: In function ‘resolve_rtc_param_alias’ util-linux-2.40/sys-utils/hwclock-rtc.c:419:22: warning[-Wanalyzer-null-argument]: use of NULL ‘alias’ where non-null expected util-linux-2.40/include/strutils.h:10: included_from: Included from here. /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 417| # 418| while (param->name) { # 419|-> if (!strcmp(alias, param->name)) { # 420| *value = param->id; # 421| return 0; Error: CLANG_WARNING: util-linux-2.40/sys-utils/hwclock-rtc.c:507:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'opt' # 505| rtc_fd = open_rtc(ctl); # 506| if (rtc_fd < 0) { # 507|-> warnx(_("cannot open %s"), rtc_dev_name); # 508| return 1; # 509| } Error: CLANG_WARNING: util-linux-2.40/sys-utils/hwclock.c:1528:6: warning[deadcode.DeadStores]: Although the value stored to 'argc' is used in the enclosing expression, the value is never actually read from 'argc' # 1526| } # 1527| # 1528|-> if (argc -= optind) { # 1529| warnx(_("too many arguments")); # 1530| errtryhelp(EXIT_FAILURE); Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/sys-utils/irq-common.c: scope_hint: In function ‘get_scols_table’ util-linux-2.40/sys-utils/irq-common.c:549:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xmalloc(size)’ where non-null expected util-linux-2.40/sys-utils/irq-common.c: scope_hint: In function ‘get_scols_table’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 547| size = sizeof(*stat->irq_info) * stat->nr_irq; # 548| result = xmalloc(size); # 549|-> memcpy(result, stat->irq_info, size); # 550| # 551| if (prev) { Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/ldattach.c: scope_hint: In function ‘main’ util-linux-2.40/sys-utils/ldattach.c:390:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(dev, 258)’ # 388| if ((tty_fd = open(dev, O_RDWR | O_NOCTTY)) < 0) # 389| err(EXIT_FAILURE, _("cannot open %s"), dev); # 390|-> if (!isatty(tty_fd)) # 391| errx(EXIT_FAILURE, _("%s is not a serial line"), dev); # 392| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/sys-utils/lscpu-cpu.c: scope_hint: In function ‘lscpu_create_cpus’ util-linux-2.40/sys-utils/lscpu-cpu.c:68:40: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*cxt.cpus’ util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.h:15: included_from: Included from here. util-linux-2.40/sys-utils/lscpu-cpu.c:11: included_from: Included from here. /usr/include/sched.h:44: included_from: Included from here. util-linux-2.40/include/cpuset.h:10: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.h:17: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.h:18: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.h:24: included_from: Included from here. util-linux-2.40/sys-utils/lscpu.h:35:25: note: in expansion of macro ‘__UL_DBG’ util-linux-2.40/sys-utils/lscpu-cpu.c:27:9: note: in expansion of macro ‘DBG’ # 66| for (n = 0, i = 0; n < (size_t) cxt->maxcpus && i < cxt->npossibles; n++) { # 67| if (CPU_ISSET_S(n, setsize, cpuset)) # 68|-> cxt->cpus[i++] = lscpu_new_cpu(n); # 69| } # 70| Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/sys-utils/lscpu-cputype.c: scope_hint: In function ‘cpuinfo_parse_cache’ util-linux-2.40/sys-utils/lscpu-cputype.c:428:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 426| return 0; # 427| p = strstr(data, "type=") + 5; # 428|-> if (!p || !*p) # 429| return 0; # 430| type = 0; Error: CLANG_WARNING: util-linux-2.40/sys-utils/lscpu.c:1336:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'cxt' # 1334| # 1335| if (cpu_modifier_specified && cxt->mode == LSCPU_OUTPUT_SUMMARY) { # 1336|-> fprintf(stderr, # 1337| _("%s: options --all, --online and --offline may only " # 1338| "be used with options --extended or --parse.\n"), Error: CLANG_WARNING: util-linux-2.40/sys-utils/lsipc.c:562:24: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer (loaded from variable 'semdsp') # 560| return; # 561| } # 562|-> for (semdsp = semds; semdsp->next != NULL || id > -1; semdsp = semdsp->next) { # 563| size_t n; # 564| Error: CLANG_WARNING: util-linux-2.40/sys-utils/lsipc.c:1328:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl' # 1326| tb = setup_table(ctl); # 1327| if (!tb) # 1328|-> return EXIT_FAILURE; # 1329| # 1330| if (global) Error: CLANG_WARNING: util-linux-2.40/sys-utils/lsns.c:565:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'p' # 563| if (rc) # 564| free(p); # 565|-> return rc; # 566| } # 567| Error: CPPCHECK_WARNING (CWE-457): util-linux-2.40/sys-utils/mount.c:820: error[legacyUninitvar]: Uninitialized variable: path # 818| snprintf(path, sizeof(path), "/proc/%i/ns/mnt", pid); # 819| # 820|-> if (mnt_context_set_target_ns(cxt, pid ? path : optarg)) # 821| err(MNT_EX_SYSERR, _("failed to set target namespace to %s"), pid ? path : optarg); # 822| break; Error: CLANG_WARNING: util-linux-2.40/sys-utils/mount.c:924:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'idmap' # 922| append_option(cxt, "X-mount.idmap", idmap); # 923| # 924|-> optmode |= optmode_mode | optmode_src; # 925| if (optmode) { # 926| if (!optmode_mode) Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/nsenter.c: scope_hint: In function ‘main’ util-linux-2.40/sys-utils/nsenter.c:175:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor util-linux-2.40/sys-utils/nsenter.c:45: included_from: Included from here. # 173| if (*fd < 0) # 174| err(EXIT_FAILURE, _("cannot open %s"), path); # 175|-> } # 176| # 177| static void open_namespace_fd(int nstype, const char *path) Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/readprofile.c:230:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&defaultpro, 1)’ util-linux-2.40/sys-utils/readprofile.c:47: included_from: Included from here. util-linux-2.40/include/c.h:60:62: note: in definition of macro ‘ignore_result’ # 228| if (fd < 0) # 229| err(EXIT_FAILURE, "%s", defaultpro); # 230|-> if (write(fd, &multiplier, to_write) != to_write) # 231| err(EXIT_FAILURE, _("error writing %s"), defaultpro); # 232| close(fd); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/sys-utils/readprofile.c:277:14: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc(len)’ # 275| } # 276| # 277|-> step = buf[0]; # 278| if (optInfo) { # 279| printf(_("Sampling_step: %u\n"), step); Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/setpgid.c: scope_hint: In function ‘main’ util-linux-2.40/sys-utils/setpgid.c:76:28: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/tty", 524288)’ # 74| fd = open("/dev/tty", O_RDONLY|O_CLOEXEC); # 75| if (fd >= 0) { # 76|-> if (sigemptyset(&s) < 0) # 77| err(EXIT_FAILURE, _("sigemptyset failed")); # 78| if (sigaddset(&s, SIGTTOU) < 0) Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/setpgid.c:78:28: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/tty", 524288)’ # 76| if (sigemptyset(&s) < 0) # 77| err(EXIT_FAILURE, _("sigemptyset failed")); # 78|-> if (sigaddset(&s, SIGTTOU) < 0) # 79| err(EXIT_FAILURE, _("sigaddset failed")); # 80| if (sigprocmask(SIG_BLOCK, &s, &old) < 0) Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/setpgid.c:80:28: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/tty", 524288)’ # 78| if (sigaddset(&s, SIGTTOU) < 0) # 79| err(EXIT_FAILURE, _("sigaddset failed")); # 80|-> if (sigprocmask(SIG_BLOCK, &s, &old) < 0) # 81| err(EXIT_FAILURE, _("sigprocmask failed")); # 82| if (tcsetpgrp(fd, getpgid(0)) < 0) Error: CLANG_WARNING: util-linux-2.40/sys-utils/setpriv.c:431:10: warning[deadcode.DeadStores]: Although the value stored to 'c' is used in the enclosing expression, the value is never actually read from 'c' # 429| opts->have_groups = 1; # 430| opts->num_groups = 0; # 431|-> while ((c = strsep(&groups, ","))) # 432| opts->num_groups++; # 433| Error: CLANG_WARNING: util-linux-2.40/sys-utils/setpriv.c:442:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'c' # 440| opts->groups[i++] = get_group(c, _("Invalid supplementary group id")); # 441| # 442|-> free(groups); # 443| } # 444| Error: CLANG_WARNING: util-linux-2.40/sys-utils/setpriv.c:555:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'c' # 553| } # 554| # 555|-> free(my_caps); # 556| } # 557| Error: CLANG_WARNING: util-linux-2.40/sys-utils/setpriv.c:612:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'c' # 610| } # 611| # 612|-> opts->securebits |= SECBIT_KEEP_CAPS; /* We need it, and it's reset on exec */ # 613| # 614| free(buf); Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/setpriv.c: scope_hint: In function ‘do_selinux_label’ util-linux-2.40/sys-utils/setpriv.c:632:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/proc/self/attr/exec", 2)’ # 630| len = strlen(label); # 631| errno = 0; # 632|-> if (write(fd, label, len) != (ssize_t) len) # 633| err(SETPRIV_EXIT_PRIVERR, # 634| _("write failed: %s"), _PATH_PROC_ATTR_EXEC); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/swapoff.c: scope_hint: In function ‘do_swapoff’ util-linux-2.40/sys-utils/swapoff.c:80:35: warning[-Wanalyzer-malloc-leak]: leak of ‘swapoff_resolve_tag(name, value, mntcache)’ util-linux-2.40/sys-utils/swapoff.c:24: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/sys-utils/swapoff.c:23: included_from: Included from here. # 78| while (tb && mnt_table_next_fs(tb, itr, &fs) == 0) { # 79| blkid_probe pr = NULL; # 80|-> const char *src = mnt_fs_get_source(fs); # 81| const char *type = mnt_fs_get_swaptype(fs); # 82| const char *data = NULL; Error: CLANG_WARNING: util-linux-2.40/sys-utils/swapoff.c:125:11: warning[unix.Malloc]: Potential leak of memory pointed to by 'special' # 123| rc = SWAPOFF_EX_OK; /* success */ # 124| else { # 125|-> switch (errno) { # 126| case EPERM: # 127| errx(SWAPOFF_EX_USAGE, _("Not superuser.")); Error: CLANG_WARNING: util-linux-2.40/sys-utils/swapoff.c:147:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'special' # 145| { # 146| const char *special = swapoff_resolve_tag(name, value, mntcache); # 147|-> return special ? do_swapoff(special, quiet, CANONIC) : cannot_find(value); # 148| } # 149| Error: CPPCHECK_WARNING (CWE-457): util-linux-2.40/sys-utils/umount.c:598: error[legacyUninitvar]: Uninitialized variable: path # 596| snprintf(path, sizeof(path), "/proc/%i/ns/mnt", pid); # 597| # 598|-> if (mnt_context_set_target_ns(cxt, pid ? path : optarg)) # 599| err(MNT_EX_SYSERR, _("failed to set target namespace to %s"), pid ? path : optarg); # 600| break; Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/unshare.c: scope_hint: In function ‘setgroups_control.part.0’ util-linux-2.40/sys-utils/unshare.c:118:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/proc/self/setgroups", 1)’ # 116| } # 117| # 118|-> if (write_all(fd, cmd, strlen(cmd))) # 119| err(EXIT_FAILURE, _("write failed %s"), file); # 120| close(fd); Error: GCC_ANALYZER_WARNING (CWE-775): util-linux-2.40/sys-utils/unshare.c: scope_hint: In function ‘map_ids_internal’ util-linux-2.40/sys-utils/unshare.c:668:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(path, 524545)’ util-linux-2.40/sys-utils/unshare.c:46: included_from: Included from here. util-linux-2.40/sys-utils/unshare.c:48: included_from: Included from here. util-linux-2.40/sys-utils/unshare.c:40: included_from: Included from here. util-linux-2.40/include/c.h:148:32: note: in definition of macro ‘min’ # 666| if (fd < 0) # 667| err(EXIT_FAILURE, _("failed to open %s"), path); # 668|-> if (write_all(fd, buffer, length) < 0) # 669| err(EXIT_FAILURE, _("failed to write %s"), path); # 670| close(fd); Error: CLANG_WARNING: util-linux-2.40/sys-utils/unshare.c:1129:4: warning[deadcode.DeadStores]: Value stored to 'fd_parent_pid' is never read # 1127| # 1128| close(fd_parent_pid); # 1129|-> fd_parent_pid = -1; # 1130| } # 1131| #endif Error: CLANG_WARNING: util-linux-2.40/sys-utils/wdctl.c:594:11: warning[deadcode.DeadStores]: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz' # 592| ssize_t sz; # 593| # 594|-> while ((sz = getline(&line, &dummy, f)) >= 0) { # 595| if (rtrim_whitespace((unsigned char *) line) == 0) # 596| continue; Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/sys-utils/zramctl.c: scope_hint: In function ‘main’ util-linux-2.40/sys-utils/zramctl.c:710:33: warning[-Wanalyzer-malloc-leak]: leak of ‘new_zram(*<unknown>)’ util-linux-2.40/sys-utils/zramctl.c:35: included_from: Included from here. util-linux-2.40/include/optutils.h:8: included_from: Included from here. util-linux-2.40/sys-utils/zramctl.c:37: included_from: Included from here. util-linux-2.40/include/c.h:18: included_from: Included from here. util-linux-2.40/sys-utils/zramctl.c:31: included_from: Included from here. # 708| zram = new_zram(argv[optind++]); # 709| if (!zram_exist(zram)) # 710|-> err(EXIT_FAILURE, "%s", zram->devname); # 711| } # 712| status(zram); Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/agetty.c: scope_hint: In function ‘issuefile_read_stream.part.0’ util-linux-2.40/term-utils/agetty.c:1850:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected util-linux-2.40/term-utils/agetty.c:14: included_from: Included from here. /usr/include/stdio.h:612:12: note: argument 2 of ‘putc’ must be non-null # 1848| output_special_char(ie, getc(f), op, tp, f); # 1849| else # 1850|-> putc(c, ie->output); # 1851| } # 1852| Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/agetty.c: scope_hint: In function ‘output_special_char’ util-linux-2.40/term-utils/agetty.c:2709:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected <built-in>: note: argument 2 of ‘__builtin_fputc’ must be non-null # 2707| } # 2708| } else # 2709|-> fputs("\033", ie->output); # 2710| break; # 2711| } Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/agetty.c:2784:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected <built-in>: note: argument 2 of ‘__builtin_fputs’ must be non-null # 2782| } # 2783| case 'l': # 2784|-> fprintf (ie->output, "%s", op->tty); # 2785| break; # 2786| case 'b': Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/agetty.c:2879:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected /usr/include/stdio.h:612:12: note: argument 2 of ‘putc’ must be non-null # 2877| #endif # 2878| default: # 2879|-> putc(c, ie->output); # 2880| break; # 2881| } Error: CLANG_WARNING: util-linux-2.40/term-utils/mesg.c:124:2: warning[deadcode.DeadStores]: Value stored to 'argc' is never read # 122| } # 123| # 124|-> argc -= optind; # 125| argv += optind; # 126| Error: CLANG_WARNING: util-linux-2.40/term-utils/script.c:412:4: warning[deadcode.DeadStores]: Value stored to 'x' is never read # 410| x += fprintf(log->fp, "%*sTTY=\"%s\"", !!x, "", ctl->ttyname); # 411| # 412|-> x += fprintf(log->fp, "%*sCOLUMNS=\"%d\" LINES=\"%d\"", !!x, "", # 413| ctl->ttycols, ctl->ttylines); # 414| } else Error: CLANG_WARNING: util-linux-2.40/term-utils/script.c:823:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'ctl.command_norm' # 821| ctl.command = optarg; # 822| ctl.command_norm = xstrdup(ctl.command); # 823|-> strrep(ctl.command_norm, '\n', ' '); # 824| break; # 825| case 'E': Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/wall.c: scope_hint: In function ‘makemsg’ util-linux-2.40/term-utils/wall.c:354:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘fs’ where non-null expected util-linux-2.40/term-utils/wall.c:54: included_from: Included from here. /usr/include/stdio.h:357:12: note: argument 1 of ‘fprintf’ must be non-null # 352| /* snprintf is not always available, but the sprintf's here # 353| will not overflow as long as %d takes at most 100 chars */ # 354|-> fprintf(fs, "\r%*s\r\n", TERM_WIDTH, " "); # 355| # 356| snprintf(lbuf, lbuflen, Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/term-utils/wall.c:362:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘fs’ where non-null expected /usr/include/stdio.h:357:12: note: argument 1 of ‘fprintf’ must be non-null # 360| free(hostname); # 361| } # 362|-> fprintf(fs, "%*s\r\n", TERM_WIDTH, " "); # 363| # 364| if (mvec) { Error: CLANG_WARNING: util-linux-2.40/text-utils/col.c:268:35: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'c') # 266| # 267| for (i = nchars, c = l->l_line; 0 < i; i--, c++) # 268|-> sorted[count[c->c_column]++] = *c; # 269| c = sorted; # 270| } else Error: CLANG_WARNING: util-linux-2.40/text-utils/col.c:274:14: warning[core.NullDereference]: Access to field 'c_column' results in a dereference of a null pointer (loaded from variable 'c') # 272| # 273| while (0 < nchars) { # 274|-> this_col = c->c_column; # 275| endc = c; # 276| Error: CLANG_WARNING: util-linux-2.40/text-utils/column.c:940:2: warning[deadcode.DeadStores]: Value stored to 'argc' is never read # 938| } # 939| } # 940|-> argc -= optind; # 941| argv += optind; # 942| Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/text-utils/hexdump-display.c: scope_hint: In function ‘get’ util-linux-2.40/text-utils/hexdump-display.c:390:29: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘curp’ where non-null expected util-linux-2.40/text-utils/hexdump-display.c:44: included_from: Included from here. util-linux-2.40/text-utils/hexdump-display.c:42: included_from: Included from here. /usr/include/string.h:64:12: note: argument 1 of ‘memcmp’ must be non-null # 388| if (!(need -= n)) { # 389| if (vflag == ALL || vflag == FIRST || # 390|-> memcmp(curp, savp, hex->blocksize) != 0) { # 391| if (vflag == DUP || vflag == FIRST) # 392| vflag = WAIT; Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/text-utils/hexdump-display.c:390:29: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘savp’ where non-null expected /usr/include/string.h:64:12: note: argument 2 of ‘memcmp’ must be non-null # 388| if (!(need -= n)) { # 389| if (vflag == ALL || vflag == FIRST || # 390|-> memcmp(curp, savp, hex->blocksize) != 0) { # 391| if (vflag == DUP || vflag == FIRST) # 392| vflag = WAIT; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/text-utils/hexdump-parse.c: scope_hint: In function ‘rewrite_rules’ util-linux-2.40/text-utils/hexdump-parse.c:284:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p1’ util-linux-2.40/text-utils/hexdump-parse.c:238:9: note: in expansion of macro ‘list_for_each’ # 282| # 283| p2 = p1 + 1; /* Set end pointer. */ # 284|-> cs[0] = *p1; /* Set conversion string. */ # 285| cs[1] = 0; # 286| Error: CLANG_WARNING: util-linux-2.40/text-utils/hexdump-parse.c:411:21: warning[unix.Malloc]: Potential memory leak # 409| p2 = strrchr(p2, ']'); # 410| if (a++ && p2) # 411|-> pr->colorlist = color_fmt(xstrndup(a, p2++ - a), pr->bcnt); # 412| else # 413| badconv(p2); Error: GCC_ANALYZER_WARNING (CWE-401): util-linux-2.40/text-utils/hexdump-parse.c: scope_hint: In function ‘color_fmt’ util-linux-2.40/text-utils/hexdump-parse.c:492:21: warning[-Wanalyzer-malloc-leak]: leak of ‘hcnext’ # 490| # 491| fmt = cfmt; # 492|-> while (cfmt && *cfmt) { # 493| char *end; # 494| /* invert this condition */ Error: CLANG_WARNING: util-linux-2.40/text-utils/hexdump-parse.c:615:7: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value # 613| p2 = p1; # 614| while (TRUE) { # 615|-> if (!*p1) { # 616| *p2 = *p1; # 617| break; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/text-utils/more.c: scope_hint: In function ‘argscan’ util-linux-2.40/text-utils/more.c:284:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘as_argv’ util-linux-2.40/text-utils/more.c:83: included_from: Included from here. util-linux-2.40/include/c.h:22: included_from: Included from here. util-linux-2.40/include/strutils.h:17: included_from: Included from here. util-linux-2.40/text-utils/more.c:81: included_from: Included from here. # 282| int move = 0; # 283| # 284|-> if (as_argv[opt][0] == '-' && isdigit_string(as_argv[opt] + 1)) { # 285| ctl->lines_per_screen = # 286| strtos16_or_err(as_argv[opt], _("failed to parse number")); Error: GCC_ANALYZER_WARNING (CWE-688): util-linux-2.40/text-utils/more.c:307:21: warning[-Wanalyzer-null-argument]: use of NULL ‘as_argv’ where non-null expected /usr/include/getopt.h:36: included_from: Included from here. util-linux-2.40/text-utils/more.c:67: included_from: Included from here. /usr/include/bits/getopt_ext.h:66:12: note: argument 2 of ‘getopt_long’ must be non-null # 305| } # 306| # 307|-> while ((c = getopt_long(as_argc, as_argv, "dflcpsun:eVh", longopts, NULL)) != -1) { # 308| switch (c) { # 309| case 'd': Error: CLANG_WARNING: util-linux-2.40/text-utils/more.c:1065:14: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<' is a garbage value # 1063| } # 1064| # 1065|-> if ((*sp < ' ' && *sp != '\n') || *sp == CERASE) { # 1066| --ctl->prompt_len; # 1067| erase_one_column(ctl); Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/text-utils/rev.c: scope_hint: In function ‘reverse_str’ util-linux-2.40/text-utils/rev.c:93:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘str’ util-linux-2.40/text-utils/rev.c:62: included_from: Included from here. # 91| # 92| for (i = 0; i < n / 2; ++i) { # 93|-> wchar_t tmp = str[i]; # 94| str[i] = str[n - 1 - i]; # 95| str[n - 1 - i] = tmp; Error: GCC_ANALYZER_WARNING (CWE-476): util-linux-2.40/text-utils/rev.c: scope_hint: In function ‘write_line’ util-linux-2.40/text-utils/rev.c:116:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘str’ # 114| { # 115| for (size_t i = 0; i < n; i++) # 116|-> fputwc(str[i], stream); # 117| } # 118| Error: CLANG_WARNING: util-linux-2.40/text-utils/rev.c:157:2: warning[deadcode.DeadStores]: Value stored to 'argc' is never read # 155| } # 156| # 157|-> argc -= optind; # 158| argv += optind; # 159| Error: CLANG_WARNING: util-linux-2.40/text-utils/rev.c:174:11: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 172| # 173| line = 0; # 174|-> while (!feof(fp)) { # 175| len = read_line(sep, buf, bufsiz, fp); # 176|