Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-resources.c:1150:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(path_to_devs, 589824)'
# 1148|           return ret;
# 1149|   
# 1150|->       dirfd_devs = open (path_to_devs, O_DIRECTORY | O_RDONLY | O_CLOEXEC);
# 1151|         if (UNLIKELY (dirfd_devs < 0))
# 1152|           return crun_make_error (err, errno, "open `%s`", path_to_devs);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c: scope_hint: In function 'get_cgroup_scope_path'
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c:1685:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-internal.h:22: included_from: Included from here.
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c:23: included_from: Included from here.
<built-in>: note: argument 1 of '__builtin_strchr' must be non-null
# 1683|     path_to_scope = xstrdup (cgroup_path);
# 1684|   
# 1685|->   cur = strchr (path_to_scope, '/');
# 1686|     while (cur)
# 1687|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c: scope_hint: In function 'libcrun_destroy_cgroup_systemd'
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c:1686:10: warning[-Wanalyzer-malloc-leak]: leak of 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)'
# 1684|   
# 1685|     cur = strchr (path_to_scope, '/');
# 1686|->   while (cur)
# 1687|       {
# 1688|         char *next = strchr (cur + 1, '/');

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
crun-1.17-build/crun-HEAD/src/libcrun/cgroup-systemd.c:1688:32: warning[-Wanalyzer-malloc-leak]: leak of 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)'
# 1686|     while (cur)
# 1687|       {
# 1688|->       char *next = strchr (cur + 1, '/');
# 1689|         if (next == NULL)
# 1690|           break;

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def5]
crun-1.17-build/crun-HEAD/src/libcrun/utils.h:105:25: warning[-Wanalyzer-fd-double-close]: double 'close' of file descriptor 'dirfd_htlb'
crun-1.17-build/crun-HEAD/src/libcrun/utils.h: scope_hint: In function 'cleanup_closep.part.0'
#  103|     int *pp = (int *) p;
#  104|     if (*pp >= 0)
#  105|->     TEMP_FAILURE_RETRY (close (*pp));
#  106|   }
#  107|   

Scan Properties

analyzer-version-clippy1.81.0
analyzer-version-cppcheck2.15.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer14.2.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.81.0
diffbase-analyzer-version-cppcheck2.15.0
diffbase-analyzer-version-gcc14.2.1
diffbase-analyzer-version-gcc-analyzer14.2.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-32.us-west-2.compute.internal
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namecrun-1.17-1.20241018152736619857.pr1579.39.g30fda6b
diffbase-store-results-to/tmp/tmpyhc0yalj/crun-1.17-1.20241018152736619857.pr1579.39.g30fda6b.tar.xz
diffbase-time-created2024-10-18 15:39:25
diffbase-time-finished2024-10-18 15:44:52
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpyhc0yalj/crun-1.17-1.20241018152736619857.pr1579.39.g30fda6b.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '/tmp/tmpyhc0yalj/crun-1.17-1.20241018152736619857.pr1579.39.g30fda6b.src.rpm'
diffbase-tool-versioncsmock-3.7.1-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-32.us-west-2.compute.internal
mock-configfedora-rawhide-x86_64
project-namecrun-1.17-1.20241017161755151809.main.33.ge9c9294
store-results-to/tmp/tmpi2bnmhqa/crun-1.17-1.20241017161755151809.main.33.ge9c9294.tar.xz
time-created2024-10-18 15:33:16
time-finished2024-10-18 15:39:09
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpi2bnmhqa/crun-1.17-1.20241017161755151809.main.33.ge9c9294.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '/tmp/tmpi2bnmhqa/crun-1.17-1.20241017161755151809.main.33.ge9c9294.src.rpm'
tool-versioncsmock-3.7.1-1.el9