Task #2000 - xen-4.18.1-1.fc40/scan-results.err
back to task #2000download
Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/balloon.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/gnttab.c:70: warning[uninitvar]: Uninitialized variable: frames # 68| } # 69| # 70|-> return map_frames(frames, nr_grant_frames); # 71| } # 72| #endif Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/gnttab.c:106:34: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<<' is a garbage value # 104| { # 105| HYPERVISOR_update_va_mapping((unsigned long)gnttab_table + PAGE_SIZE * i, # 106|-> __pte((frames[i] << PAGE_SHIFT) | L1_PROT), UVMF_INVLPG); # 107| } # 108| #endif Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/ioremap.c:43:12: warning[deadcode.DeadStores]: Although the value stored to 'mfn' is used in the enclosing expression, the value is never actually read from 'mfn' # 41| num_pages = (offset + size + PAGE_SIZE - 1) / PAGE_SIZE; # 42| phys_addr &= PAGE_MASK; # 43|-> mfns = mfn = phys_addr >> PAGE_SHIFT; # 44| # 45| va = (unsigned long)map_frames_ex(&mfns, num_pages, 0, 1, 1, Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:207:16: warning[deadcode.DeadStores]: Value stored to 'tab' during its initialization is never read # 205| unsigned long start_address, end_address; # 206| unsigned long pfn_to_map, pt_pfn = *start_pfn; # 207|-> pgentry_t *tab = pt_base, page; # 208| unsigned long pt_mfn = pfn_to_mfn(virt_to_pfn(pt_base)); # 209| unsigned long offset; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:208:19: warning[deadcode.DeadStores]: Value stored to 'pt_mfn' during its initialization is never read # 206| unsigned long pfn_to_map, pt_pfn = *start_pfn; # 207| pgentry_t *tab = pt_base, page; # 208|-> unsigned long pt_mfn = pfn_to_mfn(virt_to_pfn(pt_base)); # 209| unsigned long offset; # 210| #ifdef CONFIG_PARAVIRT Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:320:16: warning[deadcode.DeadStores]: Value stored to 'tab' during its initialization is never read # 318| ((unsigned long) text + PAGE_SIZE - 1) & PAGE_MASK; # 319| unsigned long end_address = (unsigned long) etext; # 320|-> pgentry_t *tab = pt_base, page; # 321| unsigned long mfn = pfn_to_mfn(virt_to_pfn(pt_base)); # 322| unsigned long offset; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:321:19: warning[deadcode.DeadStores]: Value stored to 'mfn' during its initialization is never read # 319| unsigned long end_address = (unsigned long) etext; # 320| pgentry_t *tab = pt_base, page; # 321|-> unsigned long mfn = pfn_to_mfn(virt_to_pfn(pt_base)); # 322| unsigned long offset; # 323| unsigned long page_size = PAGE_SIZE; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:335:9: warning[deadcode.DeadStores]: Value stored to 'mfn' is never read # 333| { # 334| tab = pt_base; # 335|-> mfn = pfn_to_mfn(virt_to_pfn(pt_base)); # 336| # 337| #if defined(__x86_64__) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:414:5: warning[deadcode.DeadStores]: Value stored to 'mfn' is never read # 412| # 413| tab = pt_base; # 414|-> mfn = virt_to_mfn(pt_base); # 415| # 416| #if defined(__x86_64__) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:706:18: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value # 704| for ( i = 0; i < n; i++ ) # 705| { # 706|-> if ( call[i].result ) # 707| { # 708| printk("update_va_mapping failed for with rc=%d.\n", ret); Error: GCC_ANALYZER_WARNING (CWE-787): xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c: scope_hint: In function ‘clear_bootstrap’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:741:5: warning[-Wanalyzer-out-of-bounds]: buffer overflow xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/mm.h:41: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/x86/x86_64/hypercall-x86_64.h:39: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/hypervisor.h:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/x86/os.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:38: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:741:5: note: write of 4095 bytes to beyond the end of ‘_text’ # 739| # 740| /* Use first page as the CoW zero page */ # 741|-> memset(&_text, 0, PAGE_SIZE); # 742| mfn_zero = virt_to_mfn((unsigned long) &_text); # 743| #ifdef CONFIG_PARAVIRT Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/extras/mini-os/arch/x86/mm.c:748:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pgt’ # 746| #else # 747| pgt = get_pgt((unsigned long)&_text); # 748|-> *pgt = 0; # 749| invlpg((unsigned long)&_text); # 750| #endif Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/balloon.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: scope_hint: In function ‘xencons_ring_avail’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c:316:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘intf’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/lib.h:131: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c:43: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: scope_hint: In function ‘xencons_ring_avail’ # 314| intf = dev->ring; # 315| # 316|-> cons = intf->in_cons; # 317| prod = intf->in_prod; # 318| mb(); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: scope_hint: In function ‘xencons_ring_recv’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c:335:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘intf’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: scope_hint: In function ‘xencons_ring_recv’ # 333| intf = dev->ring; # 334| # 335|-> cons = intf->in_cons; # 336| prod = intf->in_prod; # 337| mb(); Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c: scope_hint: In function ‘xencons_ring_init’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/console.c:363:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dev’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 361| # 362| dev = malloc(sizeof(struct consfront_dev)); # 363|-> memset(dev, 0, sizeof(struct consfront_dev)); # 364| dev->nodename = "device/console"; # 365| dev->dom = 0; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/e820.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/events.c:138:5: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 136| return -1; # 137| } # 138|-> bind_evtchn(op.port, handler, data); # 139| return op.port; # 140| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/events.c:157:2: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 155| return -1; # 156| } # 157|-> bind_evtchn(op.port, handler, data); # 158| return op.port; # 159| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/events.c:217:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 215| return rc; # 216| } # 217|-> *port = bind_evtchn(op.port, handler, data); # 218| return rc; # 219| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/events.c:239:10: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 237| return rc; # 238| } # 239|-> port = op.local_port; # 240| *local_port = bind_evtchn(port, handler, data); # 241| return rc; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/gntmap.c:126:30: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value # 124| # 125| rc = HYPERVISOR_grant_table_op(GNTTABOP_unmap_grant_ref, &op, 1); # 126|-> if (rc != 0 || op.status != GNTST_okay) { # 127| printk("GNTTABOP_unmap_grant_ref failed: " # 128| "returned %d, status %" PRId16 "\n", Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/gntmap.c:127:9: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 125| rc = HYPERVISOR_grant_table_op(GNTTABOP_unmap_grant_ref, &op, 1); # 126| if (rc != 0 || op.status != GNTST_okay) { # 127|-> printk("GNTTABOP_unmap_grant_ref failed: " # 128| "returned %d, status %" PRId16 "\n", # 129| rc, op.status); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/gntmap.c:163:30: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value # 161| # 162| rc = HYPERVISOR_grant_table_op(GNTTABOP_map_grant_ref, &op, 1); # 163|-> if (rc != 0 || op.status != GNTST_okay) { # 164| printk("GNTTABOP_map_grant_ref failed: " # 165| "returned %d, status %" PRId16 "\n", Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/gntmap.c:164:9: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 162| rc = HYPERVISOR_grant_table_op(GNTTABOP_map_grant_ref, &op, 1); # 163| if (rc != 0 || op.status != GNTST_okay) { # 164|-> printk("GNTTABOP_map_grant_ref failed: " # 165| "returned %d, status %" PRId16 "\n", # 166| rc, op.status); Error: GCC_ANALYZER_WARNING (CWE-835): xen-4.18.1-build/xen-4.18.1/extras/mini-os/gnttab.c: scope_hint: In function ‘gnttab_end_transfer’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/gnttab.c:135:12: warning[-Wanalyzer-infinite-loop]: infinite loop # 133| # 134| /* If a transfer is in progress then wait until it is completed. */ # 135|-> while (!(flags & GTF_transfer_completed)) { # 136| flags = gnttab_table[ref].flags; # 137| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/hypervisor.c:54:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 52| BUG(); # 53| # 54|-> *value = xhv.value; # 55| return ret; # 56| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/hypervisor.c:120:13: warning[deadcode.DeadStores]: Value stored to 'l2' is never read # 118| { # 119| l2i = __ffs(l2); # 120|-> l2 &= ~(1UL << l2i); # 121| # 122| port = (l1i * (sizeof(unsigned long) * 8)) + l2i; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:46: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/errno.h:116: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/x86/arch_sched.h:15:42: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 13| register unsigned long sp asm("rsp"); # 14| #endif # 15|-> current = (void *)(unsigned long)(sp & ~(__STACK_SIZE-1)); # 16| return *current; # 17| } Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/extras/mini-os/kernel.c:68: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 66| # 67| for (j=0; j<32; j++) # 68|-> xen_features[i*32+j] = !!(fi.submap & 1<<j); # 69| } # 70| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/kernel.c:68:49: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 66| # 67| for (j=0; j<32; j++) # 68|-> xen_features[i*32+j] = !!(fi.submap & 1<<j); # 69| } # 70| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/math.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-369): xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/math.c:163: error[zerodiv]: Division by zero. # 161| static volatile const unsigned int zero = 0; # 162| # 163|-> tmp.ul[H] = tmp.ul[L] = 1 / zero; # 164| if (arq) # 165| *arq = uq; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/math.c:163:29: warning[core.DivideZero]: Division by zero # 161| static volatile const unsigned int zero = 0; # 162| # 163|-> tmp.ul[H] = tmp.ul[L] = 1 / zero; # 164| if (arq) # 165| *arq = uq; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c: scope_hint: In function ‘opendir’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c:558:15: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’ # 556| DIR *ret; # 557| ret = malloc(sizeof(*ret)); # 558|-> ret->name = strdup(name); # 559| ret->offset = 0; # 560| ret->entries = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c: scope_hint: In function ‘sparse’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c:1368:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘mfns’ xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/mm.h:41: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/x86/x86_64/hypercall-x86_64.h:39: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/hypervisor.h:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/include/x86/os.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c:22: included_from: Included from here. # 1366| } # 1367| #endif # 1368|-> mfns[i] = virtual_to_mfn(data + i * PAGE_SIZE); # 1369| } # 1370| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/lib/sys.c:1375:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'mfns' # 1373| munmap((void *) data, size); # 1374| free_physical_pages(mfns, n); # 1375|-> do_map_zero(data, n); # 1376| } # 1377| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/main.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-570): xen-4.18.1-build/xen-4.18.1/extras/mini-os/main.c:68: error[subtractPointers]: Subtracting pointers that point to different objects # 66| # 67| #ifdef CONFIG_SPARSE_BSS # 68|-> sparse((unsigned long) &__app_bss_start, &__app_bss_end - &__app_bss_start); # 69| #endif # 70| #if defined(HAVE_LWIP) && defined(CONFIG_START_NETWORK) && defined(CONFIG_NETFRONT) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/mm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/sched.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/extras/mini-os/sched.c:172:17: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 170| register unsigned long sp asm ("esp"); # 171| #endif # 172|-> if ((sp & (STACK_SIZE-1)) < STACK_SIZE / 16) { # 173| static int overflowing; # 174| if (!overflowing) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/libgloss/libnosys/_exit.c:14:3: warning[deadcode.DeadStores]: Value stored to 'x' is never read # 12| /* Default stub just causes a divide by 0 exception. */ # 13| int x = rc / INT_MAX; # 14|-> x = 4 / x; # 15| # 16| /* Convince GCC that this function never returns. */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1049:10: warning[core.uninitialized.ArraySubscript]: Array subscript is undefined # 1047| int length = 0; # 1048| # 1049|-> while (isspace(*string) || *string == '-') { # 1050| if (*string == '-') # 1051| { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘newentry’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1170:15: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘new’ # 1168| { # 1169| dict_type *new = (dict_type *)malloc(sizeof(dict_type)); # 1170|-> new->word = word; # 1171| new->next = root; # 1172| root = new; Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘add_to_definition’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1186:21: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’ # 1184| { # 1185| entry->code_length += 2; # 1186|-> entry->code = # 1187| (stinst_type *) realloc((char *)(entry->code), # 1188| entry->code_length *sizeof(word_type)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1187:19: warning[unix.MallocSizeof]: Result of 'realloc' is converted to a pointer of type 'stinst_type', which is incompatible with sizeof operand type 'word_type' # 1185| entry->code_length += 2; # 1186| entry->code = # 1187|-> (stinst_type *) realloc((char *)(entry->code), # 1188| entry->code_length *sizeof(word_type)); # 1189| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1190:34: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*entry.code + (long unsigned int)*entry.code_end * 8’ # 1188| entry->code_length *sizeof(word_type)); # 1189| } # 1190|-> entry->code[entry->code_end] = word; # 1191| # 1192| return entry->code_end++; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1232:10: warning[deadcode.DeadStores]: Value stored to 'jptr' during its initialization is never read # 1230| { # 1231| int jstack[STACK]; # 1232|-> int *jptr = jstack; # 1233| /* add words to the dictionary */ # 1234| char *word; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1298:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'word' # 1296| } # 1297| # 1298|-> } # 1299| # 1300| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1391:11: warning[unix.Malloc]: Potential leak of memory pointed to by 'buffer.ptr' # 1389| read_in(&buffer, stdin); # 1390| remove_noncomments(&buffer, ptr); # 1391|-> for (i= 1; i < ac; i++) # 1392| { # 1393| if (av[i][0] == '-') Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1391:11: warning[unix.Malloc]: Potential leak of memory pointed to by 'pptr.ptr' # 1389| read_in(&buffer, stdin); # 1390| remove_noncomments(&buffer, ptr); # 1391|-> for (i= 1; i < ac; i++) # 1392| { # 1393| if (av[i][0] == '-') Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1404:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'b.ptr' # 1402| if (!f) # 1403| { # 1404|-> fprintf(stderr,"Can't open the input file %s\n",av[i+1]); # 1405| return 33; # 1406| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1405:5: warning[core.StackAddressEscape]: Address of stack memory associated with local variable 'pptr' is still referred to by the global variable 'ptr' upon returning to the caller. This will be a dangling reference # 1403| { # 1404| fprintf(stderr,"Can't open the input file %s\n",av[i+1]); # 1405|-> return 33; # 1406| } # 1407| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1421:5: warning[core.StackAddressEscape]: Address of stack memory associated with local variable 'pptr' is still referred to by the global variable 'ptr' upon returning to the caller. This will be a dangling reference # 1419| } # 1420| write_buffer(stack+0); # 1421|-> return 0; # 1422| } # 1423| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:50:12: warning[unix.Malloc]: Potential leak of memory pointed to by 'token' # 48| # 49| if(!(*argz = (char *)malloc(*argz_len))) # 50|-> return ENOMEM; # 51| # 52| free(old_running); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_create_sep.c: scope_hint: In function ‘argz_create_sep’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:68:1: warning[-Wanalyzer-malloc-leak]: leak of ‘running’ # 66| free(old_running); # 67| return 0; # 68|-> } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c: scope_hint: In function ‘argz_replace’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c:61:15: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘new_argz_iter’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 59| /* copy everything up to, but not including str, from old argz to # 60| new argz. */ # 61|-> memcpy(new_argz_iter, last_iter, buf_iter - last_iter - str_len); # 62| new_argz_iter += (buf_iter - last_iter - str_len); # 63| /* copy replacement string. */ Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c:70:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘new_argz_iter’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 68| } # 69| /* copy everything after last occurrence of str. */ # 70|-> memcpy(new_argz_iter, last_iter, *argz + *argz_len - last_iter); # 71| # 72| /* reallocate argz, and copy over the new value. */ Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c:73:9: warning[-Wanalyzer-malloc-leak]: leak of ‘new_argz_iter’ # 71| # 72| /* reallocate argz, and copy over the new value. */ # 73|-> if(!(*argz = (char *)realloc(*argz, new_argz_len))) # 74| return ENOMEM; # 75| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/argz_replace.c:74:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'new_argz_iter' # 72| /* reallocate argz, and copy over the new value. */ # 73| if(!(*argz = (char *)realloc(*argz, new_argz_len))) # 74|-> return ENOMEM; # 75| # 76| memcpy(*argz, new_argz, new_argz_len); Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c: scope_hint: In function ‘envz_merge’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:33:23: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘name_str’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_strchr’ must be non-null # 31| { # 32| name_str = strdup (entry); # 33|-> name_iter = strchr(name_str, '='); # 34| if(name_iter) # 35| *name_iter = '\0'; Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: warning[-Wanalyzer-malloc-leak]: leak of ‘name_str’ # 43| else # 44| { # 45|-> name_str = strdup (entry); # 46| name_iter = strchr(name_str, '='); # 47| if(name_iter) Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:46:23: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘name_str’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_strchr’ must be non-null # 44| { # 45| name_str = strdup (entry); # 46|-> name_iter = strchr(name_str, '='); # 47| if(name_iter) # 48| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:60:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'name_str' # 58| } # 59| } # 60|-> return retval; # 61| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswalpha.c:75:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 73| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 74| { # 75|-> unicode = 0; # 76| /* fall-through */ # 77| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswblank.c:71:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 69| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 70| { # 71|-> unicode = 0; # 72| /* fall-through */ # 73| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswcntrl.c:71:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 69| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 70| { # 71|-> unicode = 0; # 72| /* fall-through */ # 73| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswprint.c:75:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 73| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 74| { # 75|-> unicode = 0; # 76| /* fall-through */ # 77| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswpunct.c:75:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 73| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 74| { # 75|-> unicode = 0; # 76| /* fall-through */ # 77| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/iswspace.c:71:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 69| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 70| { # 71|-> unicode = 0; # 72| /* fall-through */ # 73| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/towlower.c:76:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 74| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 75| { # 76|-> unicode = 0; # 77| /* fall-through */ # 78| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/ctype/towupper.c:76:7: warning[deadcode.DeadStores]: Value stored to 'unicode' is never read # 74| if (__lc_ctype[0] == 'C' && __lc_ctype[1] == '\0') # 75| { # 76|-> unicode = 0; # 77| /* fall-through */ # 78| } Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/errno/errno.c:11:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 11 | __errno () # | ^~~~~~~ # 9| # 10| int * # 11|-> __errno () # 12| { # 13| return &_REENT->_errno; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/fix_grouping.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c:149:2: warning[deadcode.DeadStores]: Value stored to 'locale_buf' is never read # 147| * Record the successful parse in the cache. # 148| */ # 149|-> locale_buf = lbuf; # 150| # 151| *using_locale = 1; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c:155:2: warning[deadcode.DeadStores]: Value stored to 'locale_buf' is never read # 153| # 154| reset_locale: # 155|-> locale_buf = locale_buf_C; # 156| save_using_locale = 0; # 157| bad_lbuf: Error: GCC_ANALYZER_WARNING (CWE-1341): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c: scope_hint: In function ‘__part_load_locale’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c:160:15: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘fd’ # 158| free(lbuf); # 159| bad_locale: # 160|-> (void)close(fd); # 161| no_locale: # 162| *using_locale = save_using_locale; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c: scope_hint: In function ‘split_lines’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/ldpart.c:173:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ # 171| for (i = 0; p < plim; i++) { # 172| p = strchr(p, '\n'); # 173|-> *p++ = '\0'; # 174| } # 175| return i; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/locale/nl_langinfo.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:22:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 22 | static long get_number (); # | ^~~~~~ # 20| #endif # 21| # 22|-> static long get_number (); # 23| static void print_number (); # 24| static void write_char (); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:23:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 23 | static void print_number (); # | ^~~~~~ # 21| # 22| static long get_number (); # 23|-> static void print_number (); # 24| static void write_char (); # 25| static void write_string (); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:24:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 24 | static void write_char (); # | ^~~~~~ # 22| static long get_number (); # 23| static void print_number (); # 24|-> static void write_char (); # 25| static void write_string (); # 26| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:25:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 25 | static void write_string (); # | ^~~~~~ # 23| static void print_number (); # 24| static void write_char (); # 25|-> static void write_string (); # 26| # 27| /* Non-zero for big-endian systems. */ Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:179:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 179 | get_number (s, size, unsigned_p) # | ^~~~~~~~~~ # 177| # 178| static long # 179|-> get_number (s, size, unsigned_p) # 180| char *s; # 181| long size; Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:222:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 222 | print_number (base, unsigned_p, n) # | ^~~~~~~~~~~~ # 220| # 221| static void # 222|-> print_number (base, unsigned_p, n) # 223| int base; # 224| int unsigned_p; Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:256:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 256 | write_char (c) # | ^~~~~~~~~~ # 254| # 255| static void # 256|-> write_char (c) # 257| char c; # 258| { Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:267:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 267 | write_string (s) # | ^~~~~~~~~~~~ # 265| # 266| static void # 267|-> write_string (s) # 268| char *s; # 269| { Error: CPPCHECK_WARNING (CWE-570): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:36: error[subtractPointers]: Subtracting pointers that point to different objects # 34| size_t i; # 35| # 36|-> count = __preinit_array_end - __preinit_array_start; # 37| for (i = 0; i < count; i++) # 38| __preinit_array_start[i] (); Error: CPPCHECK_WARNING (CWE-570): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:42: error[subtractPointers]: Subtracting pointers that point to different objects # 40| _init (); # 41| # 42|-> count = __init_array_end - __init_array_start; # 43| for (i = 0; i < count; i++) # 44| __init_array_start[i] (); Error: CPPCHECK_WARNING (CWE-570): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:54: error[subtractPointers]: Subtracting pointers that point to different objects # 52| size_t i; # 53| # 54|-> count = __fini_array_end - __fini_array_start; # 55| for (i = 0; i < count; i++) # 56| __fini_array_start[i] (); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:106:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 106 | __hash_open(file, flags, mode, info, dflags) # | ^~~~~~~~~~~ # 104| # 105| extern DB * # 106|-> __hash_open(file, flags, mode, info, dflags) # 107| const char *file; # 108| int flags, mode, dflags; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:533:2: warning[deadcode.DeadStores]: Value stored to 'whdrp' is never read # 531| # 532| fp = hashp->fp; # 533|-> whdrp = &hashp->hdr; # 534| #if (BYTE_ORDER == LITTLE_ENDIAN) # 535| whdrp = &whdr; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:685:6: warning[deadcode.DeadStores]: Value stored to 'ndx' is never read # 683| if (!(pageno = # 684| __find_last_page(hashp, &bufp))) { # 685|-> ndx = 0; # 686| rbufp = bufp; # 687| break; /* FOR */ Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c: scope_hint: In function ‘hash_seq’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:814:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bp’ # 812| hashp->cndx = 1; # 813| } # 814|-> if (!bp[0]) { # 815| hashp->cpage = NULL; # 816| ++hashp->cbucket; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:872:16: warning[unix.MallocSizeof]: Result of 'calloc' is converted to a pointer of type 'BUFHEAD *', which is incompatible with sizeof operand type 'SEGMENT' # 870| } # 871| if ((hashp->dir[new_segnum] = # 872|-> (SEGMENT)calloc(hashp->SGSIZE, sizeof(SEGMENT))) == NULL) # 873| return (-1); # 874| hashp->exsegs++; Error: GCC_ANALYZER_WARNING (CWE-131): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c: scope_hint: In function ‘hash_realloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:912:24: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size # 910| memset((char *)p + oldsize, 0, newsize - oldsize); # 911| free(*p_ptr); # 912|-> *p_ptr = p; # 913| } # 914| return (p); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:948:17: warning[unix.MallocSizeof]: Result of 'calloc' is converted to a pointer of type 'SEGMENT', which is incompatible with sizeof operand type 'SEGMENT *' # 946| # 947| if ((hashp->dir = # 948|-> (SEGMENT *)calloc(hashp->DSIZE, sizeof(SEGMENT *))) == NULL) { # 949| save_errno = errno; # 950| (void)hdestroy(hashp); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:956:15: warning[unix.MallocSizeof]: Result of 'calloc' is converted to a pointer of type 'BUFHEAD *', which is incompatible with sizeof operand type 'SEGMENT' # 954| /* Allocate segments */ # 955| if ((store = # 956|-> (SEGMENT)calloc(nsegs << hashp->SSHIFT, sizeof(SEGMENT))) == NULL) { # 957| save_errno = errno; # 958| (void)hdestroy(hashp); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c: scope_hint: In function ‘alloc_segs’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:962:23: warning[-Wanalyzer-malloc-leak]: leak of ‘store’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:57: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:956:45: note: in expansion of macro ‘SSHIFT’ # 960| return (-1); # 961| } # 962|-> for (i = 0; i < nsegs; i++, hashp->nsegs++) # 963| hashp->dir[i] = &store[i << hashp->SSHIFT]; # 964| return (0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:964:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'store' # 962| for (i = 0; i < nsegs; i++, hashp->nsegs++) # 963| hashp->dir[i] = &store[i << hashp->SSHIFT]; # 964|-> return (0); # 965| } # 966| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:73: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: scope_hint: In function ‘overflow_page’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.h:171:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘freep’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: note: in expansion of macro ‘SETBIT’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:727:33: note: in expansion of macro ‘BSIZE’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: note: in expansion of macro ‘SETBIT’ # 169| /* Given the address of the beginning of a big map, clear/set the nth bit */ # 170| #define CLRBIT(A, N) ((A)[(N)/BITS_PER_MAP] &= ~(1<<((N)%BITS_PER_MAP))) # 171|-> #define SETBIT(A, N) ((A)[(N)/BITS_PER_MAP] |= (1<<((N)%BITS_PER_MAP))) # 172| #define ISSET(A, N) ((A)[(N)/BITS_PER_MAP] & (1<<((N)%BITS_PER_MAP))) # 173| Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash.h:171:29: warning[-Wmaybe-uninitialized]: ‘freep’ may be used uninitialized # 171 | #define SETBIT(A, N) ((A)[(N)/BITS_PER_MAP] |= (1<<((N)%BITS_PER_MAP))) # | ~~~^~~~~~~~~~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: note: in expansion of macro ‘SETBIT’ # 769 | SETBIT(freep, free_bit); # | ^~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: scope_hint: In function ‘__add_ovflpage’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:670:21: note: ‘freep’ was declared here # 670 | __uint32_t *freep; # | ^~~~~ # 169| /* Given the address of the beginning of a big map, clear/set the nth bit */ # 170| #define CLRBIT(A, N) ((A)[(N)/BITS_PER_MAP] &= ~(1<<((N)%BITS_PER_MAP))) # 171|-> #define SETBIT(A, N) ((A)[(N)/BITS_PER_MAP] |= (1<<((N)%BITS_PER_MAP))) # 172| #define ISSET(A, N) ((A)[(N)/BITS_PER_MAP] & (1<<((N)%BITS_PER_MAP))) # 173| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-691): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c: scope_hint: In function ‘__big_insert’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c:126:20: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’ # 126 | if (!key_size) # | ^ # 124| return (-1); # 125| n = p[0]; # 126|-> if (!key_size) # 127| if (FREESPACE(p)) { # 128| move_bytes = MIN(FREESPACE(p), val_size); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c:200:2: warning[deadcode.DeadStores]: Value stored to 'pageno' is never read # 198| last_bfp = NULL; # 199| bp = (__uint16_t *)bufp->page; # 200|-> pageno = 0; # 201| key_done = 0; # 202| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c:406:4: warning[deadcode.DeadStores]: Value stored to 'bp' is never read # 404| if (!bufp) # 405| return (-1); # 406|-> bp = (__uint16_t *)bufp->page; # 407| } else { # 408| /* The data is all on one page. */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c: scope_hint: In function ‘__get_buf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:153:29: warning[-Wmaybe-uninitialized]: ‘segment_ndx’ may be used uninitialized # 153 | segp[segment_ndx] = # | ^ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:122:22: note: ‘segment_ndx’ was declared here # 122 | int is_disk, segment_ndx; # | ^~~~~~~~~~~ # 151| return (NULL); # 152| if (!prev_bp) # 153|-> segp[segment_ndx] = # 154| (BUFHEAD *)((ptrdiff_t)bp | is_disk_mask); # 155| } else { Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:153:29: warning[-Wmaybe-uninitialized]: ‘segp’ may be used uninitialized # 153 | segp[segment_ndx] = # | ^ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:123:17: note: ‘segp’ was declared here # 123 | SEGMENT segp; # | ^~~~ # 151| return (NULL); # 152| if (!prev_bp) # 153|-> segp[segment_ndx] = # 154| (BUFHEAD *)((ptrdiff_t)bp | is_disk_mask); # 155| } else { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:335:7: warning[unix.Malloc]: Use of memory after it is freed # 333| for (bp = LRU; bp != &hashp->bufhead;) { # 334| /* Check that the buffer is valid */ # 335|-> if (bp->addr || IS_BUCKET(bp->flags)) { # 336| if (to_disk && (bp->flags & BUF_MOD) && # 337| __put_page(hashp, bp->page, Error: COMPILER_WARNING (CWE-1164): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:69:1: warning[-Wunused-function]: ‘hash1’ defined but not used # 69 | hash1(keyarg, len) # | ^~~~~ # 67| # 68| static __uint32_t # 69|-> hash1(keyarg, len) # 70| const void *keyarg; # 71| size_t len; Error: COMPILER_WARNING (CWE-1164): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:89:1: warning[-Wunused-function]: ‘hash2’ defined but not used # 89 | hash2(keyarg, len) # | ^~~~~ # 87| # 88| static __uint32_t # 89|-> hash2(keyarg, len) # 90| const void *keyarg; # 91| size_t len; Error: COMPILER_WARNING (CWE-1164): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:118:1: warning[-Wunused-function]: ‘hash3’ defined but not used # 118 | hash3(keyarg, len) # | ^~~~~ # 116| */ # 117| static __uint32_t # 118|-> hash3(keyarg, len) # 119| const void *keyarg; # 120| size_t len; Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_log2.c:47:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 47 | __log2(num) # | ^~~~~~ # 45| # 46| __uint32_t # 47|-> __log2(num) # 48| __uint32_t num; # 49| { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:340:4: warning[deadcode.DeadStores]: Value stored to 'n' is never read # 338| # 339| ino = (__uint16_t *)bufp->page; # 340|-> n = 1; # 341| scopyto = hashp->BSIZE; # 342| moved = 0; Error: GCC_ANALYZER_WARNING (CWE-131): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: scope_hint: In function ‘__ibitmap’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:636:33: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size # 634| int clearbytes, clearints; # 635| # 636|-> if ((ip = (__uint32_t *)malloc(hashp->BSIZE)) == NULL) # 637| return (1); # 638| hashp->nmaps++; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:769:3: warning[core.NullDereference]: Array access (from variable 'freep') results in an undefined pointer dereference # 767| */ # 768| free_bit++; # 769|-> SETBIT(freep, free_bit); # 770| } # 771| Error: GCC_ANALYZER_WARNING (CWE-131): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: scope_hint: In function ‘fetch_bitmap’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:918:31: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:918:61: note: in expansion of macro ‘BSIZE’ # 916| if (ndx >= hashp->nmaps) # 917| return (NULL); # 918|-> if ((hashp->mapp[ndx] = (__uint32_t *)malloc(hashp->BSIZE)) == NULL) # 919| return (NULL); # 920| if (__get_page(hashp, Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c:126:32: warning[-Wunused-variable]: unused variable ‘ie’ # 126 | struct internal_entry *ie; # | ^~ # 124| hdestroy_r(struct hsearch_data *htab) # 125| { # 126|-> struct internal_entry *ie; # 127| size_t idx; # 128| Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c: scope_hint: In function ‘hdestroy_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c:127:16: warning[-Wunused-variable]: unused variable ‘idx’ # 127 | size_t idx; # | ^~~ # 125| { # 126| struct internal_entry *ie; # 127|-> size_t idx; # 128| # 129| if (htab->htable == NULL) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:84:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 84 | static inline char *med3 _PARAMS((char *, char *, char *, int (*)())); # | ^~~~~~ # 82| #endif # 83| # 84|-> static inline char *med3 _PARAMS((char *, char *, char *, int (*)())); # 85| static inline void swapfunc _PARAMS((char *, char *, int, int)); # 86| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:130:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 130 | _DEFUN(med3, (a, b, c, cmp), # | ^~~~~~ # 128| # 129| static inline char * # 130|-> _DEFUN(med3, (a, b, c, cmp), # 131| char *a _AND # 132| char *b _AND Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:142:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 142 | _DEFUN(qsort, (a, n, es, cmp), # | ^~~~~~ # 140| # 141| void # 142|-> _DEFUN(qsort, (a, n, es, cmp), # 143| void *a _AND # 144| size_t n _AND Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/tdelete.c:66:2: warning[unix.Malloc]: Use of memory after it is freed # 64| free(*rootp); /* D4: Free node */ # 65| *rootp = q; /* link parent to new node */ # 66|-> return p; # 67| } Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/search/tdestroy.c:29:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 29 | trecurse(root, free_action) # | ^~~~~~~~ # 27| /* Walk the nodes of a tree */ # 28| static void # 29|-> trecurse(root, free_action) # 30| node_t *root; /* Root of the tree to be walked */ # 31| void (*free_action)(void *); Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c: scope_hint: In function ‘_asiprintf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c:48:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 48 | *strp = f._bf._base; # | ^ # 46| { # 47| *f._p = 0; # 48|-> *strp = f._bf._base; # 49| } # 50| return (ret); Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c: scope_hint: In function ‘asiprintf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c:75:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 75 | *strp = f._bf._base; # | ^ # 73| { # 74| *f._p = 0; # 75|-> *strp = f._bf._base; # 76| } # 77| return (ret); Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c: scope_hint: In function ‘_asprintf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c:48:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 48 | *strp = f._bf._base; # | ^ # 46| { # 47| *f._p = 0; # 48|-> *strp = f._bf._base; # 49| } # 50| return (ret); Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c: scope_hint: In function ‘asprintf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c:75:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 75 | *strp = f._bf._base; # | ^ # 73| { # 74| *f._p = 0; # 75|-> *strp = f._bf._base; # 76| } # 77| return (ret); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fclose.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fmemopen.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fmemopen.c: scope_hint: In function ‘_fmemopen_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fmemopen.c:313:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 311| /* r+/w+/a+, and no buf: file starts empty. */ # 312| c->buf = (char *) (c + 1); # 313|-> *(char *) buf = '\0'; # 314| c->pos = c->eof = 0; # 315| c->append = (flags & __SAPP) != 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fmemopen.c:313:21: warning[core.NullDereference]: Dereference of null pointer # 311| /* r+/w+/a+, and no buf: file starts empty. */ # 312| c->buf = (char *) (c + 1); # 313|-> *(char *) buf = '\0'; # 314| c->pos = c->eof = 0; # 315| c->append = (flags & __SAPP) != 0; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c: scope_hint: In function ‘_fread_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c:182:25: warning[-Wpointer-sign]: pointer targets in assignment from ‘char *’ to ‘unsigned char *’ differ in signedness # 182 | fp->_bf._base = p; # | ^ # 180| int old_size = fp->_bf._size; # 181| /* allow __refill to use user's buffer */ # 182|-> fp->_bf._base = p; # 183| fp->_bf._size = resid; # 184| fp->_p = p; Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c:184:18: warning[-Wpointer-sign]: pointer targets in assignment from ‘char *’ to ‘unsigned char *’ differ in signedness # 184 | fp->_p = p; # | ^ # 182| fp->_bf._base = p; # 183| fp->_bf._size = resid; # 184|-> fp->_p = p; # 185| rc = __srefill_r (ptr, fp); # 186| /* restore fp buffering back to original state */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/freopen.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fvwrite.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/fvwrite.c:59:8: warning[deadcode.DeadStores]: Although the value stored to 'len' is used in the enclosing expression, the value is never actually read from 'len' # 57| int nlknown, nldist; # 58| # 59|-> if ((len = uio->uio_resid) == 0) # 60| return 0; # 61| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/getdelim.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/getdelim.c:120:15: warning[deadcode.DeadStores]: Value stored to 'cont' is never read # 118| if (buf == NULL) # 119| { # 120|-> cont = 0; # 121| break; # 122| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/mktemp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/open_memstream.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/open_memstream.c: scope_hint: In function ‘_open_memstream_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/open_memstream.c:257:7: warning[-Wunused-variable]: unused variable ‘flags’ # 257 | int flags; # | ^~~~~ # 255| FILE *fp; # 256| memstream *c; # 257|-> int flags; # 258| # 259| if (!buf || !size) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/refill.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/ungetc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vasiprintf.c: scope_hint: In function ‘_vasiprintf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vasiprintf.c:60:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 60 | *strp = f._bf._base; # | ^ # 58| { # 59| *f._p = 0; # 60|-> *strp = f._bf._base; # 61| } # 62| return ret; Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vasprintf.c: scope_hint: In function ‘_vasprintf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vasprintf.c:60:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness # 60 | *strp = f._bf._base; # | ^ # 58| { # 59| *f._p = 0; # 60|-> *strp = f._bf._base; # 61| } # 62| return ret; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfprintf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfprintf.c:575:3: warning[deadcode.DeadStores]: Value stored to 'fmt_anchor' is never read # 573| goto done; # 574| #endif # 575|-> fmt_anchor = fmt; # 576| fmt++; /* skip over '%' */ # 577| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfprintf.c:1025:12: warning[deadcode.DeadStores]: Although the value stored to 'ch' is used in the enclosing expression, the value is never actually read from 'ch' # 1023| flags |= HEXPREFIX; # 1024| ox[0] = '0'; # 1025|-> ox[1] = ch = 'x'; # 1026| goto nosign; # 1027| case 's': Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfprintf.c:1397:18: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value # 1395| /* round to even */ # 1396| rve = bp; # 1397|-> while (*--rve == digits[0xf]) { # 1398| *rve = '0'; # 1399| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:229:12: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 229 | /*static*/ u_char *__sccl (); # | ^~~~~~ # 227| #endif # 228| # 229|-> /*static*/ u_char *__sccl (); # 230| # 231| /* Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c: scope_hint: In function ‘__svfscanf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:302:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 302 | u_long (*ccfn) () = 0; /* conversion function (strtol/strtoul) */ # | ^~~~~~ # 300| mbstate_t state; /* value to keep track of multibyte state */ # 301| # 302|-> u_long (*ccfn) () = 0; /* conversion function (strtol/strtoul) */ # 303| char ccltab[256]; /* character class table for %[...] */ # 304| char buf[BUF]; /* buffer for numeric conversions */ Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:506:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 506 | ccfn = (u_long (*)())_strtol_r; # | ^~~~ # 504| case 'd': # 505| c = CT_INT; # 506|-> ccfn = (u_long (*)())_strtol_r; # 507| base = 10; # 508| break; Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:512:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 512 | ccfn = (u_long (*)())_strtol_r; # | ^~~~ # 510| case 'i': # 511| c = CT_INT; # 512|-> ccfn = (u_long (*)())_strtol_r; # 513| base = 0; # 514| break; Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:634:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 634 | ccfn = (u_long (*)())_strtol_r; # | ^~~~ # 632| flags |= LONG; # 633| c = CT_INT; # 634|-> ccfn = (u_long (*)())_strtol_r; # 635| base = 10; # 636| break; Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:1403: error[nullPointer]: Null pointer dereference # 1401| flp = GET_ARG (N, ap, float *); # 1402| if (isnan (res)) # 1403|-> *flp = nanf (NULL); # 1404| else # 1405| *flp = res; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/__call_atexit.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c: scope_hint: In function ‘btowc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c:22:37: warning[-Wpointer-sign]: pointer targets in passing argument 3 of ‘_mbtowc_r’ differ in signedness # 22 | retval = _mbtowc_r (_REENT, &pwc, &b, 1, &mbs); # | ^~ # | | # | unsigned char * xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/include/wchar.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c:1: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/include/stdlib.h:91:9: note: expected ‘const char *’ but argument is of type ‘unsigned char *’ # 91 | int _EXFUN(_mbtowc_r,(struct _reent *, wchar_t *, const char *, size_t, _mbstate_t *)); # | ^~~~~~ # 20| _REENT_CHECK_MISC(_REENT); # 21| # 22|-> retval = _mbtowc_r (_REENT, &pwc, &b, 1, &mbs); # 23| # 24| if (c == EOF || retval != 1) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/dtoa.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ecvtbuf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/gdtoa-gethex.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/gdtoa-hexnan.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv.c: scope_hint: In function ‘getenv’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv.c:89:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 89 | char *_findenv_r (); # | ^~~~ # 87| { # 88| int offset; # 89|-> char *_findenv_r (); # 90| # 91| return _findenv_r (_REENT, name, &offset); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv_r.c: scope_hint: In function ‘_getenv_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv_r.c:133:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 133 | char *_findenv_r (); # | ^~~~ # 131| { # 132| int offset; # 133|-> char *_findenv_r (); # 134| # 135| return _findenv_r (reent_ptr, name, &offset); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getopt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/getsubopt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:722:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 722 | eiisinf (x) # | ^~~~~~~ # 720| /* Return nonzero if internal format number is infinite. */ # 721| static int # 722|-> eiisinf (x) # 723| unsigned short x[]; # 724| { Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c: scope_hint: In function ‘enormlz’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:2490:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘x[2]’ # 2488| sc = 0; # 2489| p = &x[M]; # 2490|-> if( *p != 0 ) # 2491| goto normdn; # 2492| ++p; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:2767:1: warning[deadcode.DeadStores]: Value stored to 's' is never read # 2765| # 2766| etoasc( e, outbuf, ndigits, mode, ldp ); # 2767|-> s = outbuf; # 2768| if( eisinf(e) || eisnan(e) ) # 2769| { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c: scope_hint: In function ‘asctoeg’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:20: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘sp’ # 3278| for( k=0; k<c; k++ ) # 3279| { # 3280|-> if( (*sp++ = *s++) == '\0' ) # 3281| break; # 3282| } Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3329:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yy[2]’ # 3327| * of the low guard word after normalization. # 3328| */ # 3329|-> if( yy[2] == 0 ) # 3330| { # 3331| if( decflg ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3488:3: warning[deadcode.DeadStores]: Value stored to 'k' is never read # 3486| emovi( etens[0], tt ); # 3487| lexp -= tt[E]; # 3488|-> k = edivm( tt, yy, ldp ); # 3489| lexp += EXONE; # 3490| nexp -= 4096; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c:1014:41: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 1014 | #define malloc_update_mallinfo __malloc_update_mallinfo # | ^~~~~~~~~~~~~~~~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c:3412:13: note: in expansion of macro ‘malloc_update_mallinfo’ # 3412 | STATIC void malloc_update_mallinfo() # | ^~~~~~~~~~~~~~~~~~~~~~ # 1012| #define malloc_usable_size _malloc_usable_size_r # 1013| # 1014|-> #define malloc_update_mallinfo __malloc_update_mallinfo # 1015| # 1016| #define malloc_av_ __malloc_av_ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c:2201:2: warning[deadcode.DeadStores]: Value stored to 'correction_failed' is never read # 2199| { # 2200| correction = 0; # 2201|-> correction_failed = 1; # 2202| new_brk = brk; # 2203| } Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mlock.c:47:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 47 | __malloc_lock (ptr) # | ^~~~~~~~~~~~~ # 45| # 46| void # 47|-> __malloc_lock (ptr) # 48| struct _reent *ptr; # 49| { Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mlock.c:56:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 56 | __malloc_unlock (ptr) # | ^~~~~~~~~~~~~~~ # 54| # 55| void # 56|-> __malloc_unlock (ptr) # 57| struct _reent *ptr; # 58| { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__multadd’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:184:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:83: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:418:9: note: in expansion of macro ‘pow5mult’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:87: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:426:9: note: in expansion of macro ‘multadd’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:143:9: note: in expansion of macro ‘multadd’ # 182| } # 183| b->_x[wds++] = a; # 184|-> b->_wds = wds; # 185| } # 186| return b; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__s2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:206:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:190:9: note: in expansion of macro ‘s2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:204:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:204:7: note: in expansion of macro ‘Balloc’ # 204| b = Balloc (ptr, k); # 205| b->_x[0] = y9; # 206|-> b->_wds = 1; # 207| #else # 208| b = Balloc (ptr, k + 1); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__i2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:321:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:315:9: note: in expansion of macro ‘i2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:319:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:319:7: note: in expansion of macro ‘Balloc’ # 319| b = Balloc (ptr, 1); # 320| b->_x[0] = i; # 321|-> b->_wds = 1; # 322| return b; # 323| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:366:33: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'xc') # 364| do # 365| { # 366|-> z = (*x & 0xffff) * y + (*xc & 0xffff) + carry; # 367| carry = z >> 16; # 368| z2 = (*x++ >> 16) * y + (*xc >> 16) + carry; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:380:9: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'xc') # 378| xc = xc0; # 379| carry = 0; # 380|-> z2 = *xc; # 381| do # 382| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:412:47: warning[core.NullDereference]: Dereference of null pointer # 410| } # 411| #endif # 412|-> for (xc0 = c->_x, xc = xc0 + wc; wc > 0 && !*--xc; --wc); # 413| c->_wds = wc; # 414| return c; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__multiply’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:413:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:326:9: note: in expansion of macro ‘mult’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:348:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:348:7: note: in expansion of macro ‘Balloc’ # 411| #endif # 412| for (xc0 = c->_x, xc = xc0 + wc; wc > 0 && !*--xc; --wc); # 413|-> c->_wds = wc; # 414| return c; # 415| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:476:11: warning[core.NullDereference]: Dereference of null pointer # 474| x1 = b1->_x; # 475| for (i = 0; i < n; i++) # 476|-> *x1++ = 0; # 477| x = b->_x; # 478| xe = x + b->_wds; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:486:10: warning[core.NullDereference]: Dereference of null pointer # 484| do # 485| { # 486|-> *x1++ = *x << k | z; # 487| z = *x++ >> k1; # 488| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:510:13: warning[core.NullDereference]: Dereference of null pointer # 508| else # 509| do # 510|-> *x1++ = *x++; # 511| while (x < xe); # 512| b1->_wds = n1 - 1; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__lshift’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:512:12: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b1’ # 510| *x1++ = *x++; # 511| while (x < xe); # 512|-> b1->_wds = n1 - 1; # 513| Bfree (ptr, b); # 514| return b1; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__mdiff’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:563:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:548:9: note: in expansion of macro ‘diff’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: note: in expansion of macro ‘Balloc’ # 561| { # 562| c = Balloc (ptr, 0); # 563|-> c->_wds = 1; # 564| c->_x[0] = 0; # 565| return c; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:577:12: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:548:9: note: in expansion of macro ‘diff’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:576:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:576:7: note: in expansion of macro ‘Balloc’ # 575| i = 0; # 576| c = Balloc (ptr, a->_k); # 577|-> c->_sign = i; # 578| wa = a->_wds; # 579| xa = a->_x; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c: scope_hint: In function ‘__d2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:806:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:9: note: in expansion of macro ‘d2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ # 804| if (k) # 805| { # 806|-> x[0] = y | z << (32 - k); # 807| z >>= k; # 808| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:806:15: warning[core.NullDereference]: Array access (from variable 'x') results in a null pointer dereference # 804| if (k) # 805| { # 806|-> x[0] = y | z << (32 - k); # 807| z >>= k; # 808| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:810:7: warning[core.NullDereference]: Array access (from variable 'x') results in a null pointer dereference # 808| } # 809| else # 810|-> x[0] = y; # 811| i = b->_wds = (x[1] = z) ? 2 : 1; # 812| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:810:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:9: note: in expansion of macro ‘d2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ # 808| } # 809| else # 810|-> x[0] = y; # 811| i = b->_wds = (x[1] = z) ? 2 : 1; # 812| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:821:12: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:9: note: in expansion of macro ‘d2b’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:93:9: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: note: in expansion of macro ‘Balloc’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/mprec.c:820:11: note: in expansion of macro ‘lo0bits’ # 819| #endif # 820| k = lo0bits (&z); # 821|-> x[0] = z; # 822| i = b->_wds = 1; # 823| #ifndef _DOUBLE_IS_32BITS Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/setenv_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:156:9: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 154| # 155| case STRTOG_Denormal: # 156|-> L[_1] = bits[0]; # 157| L[_0] = bits[1]; # 158| break; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:162:9: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 160| case STRTOG_Normal: # 161| case STRTOG_NaNbits: # 162|-> L[_1] = bits[0]; # 163| L[_0] = (bits[1] & ~0x100000) | ((exp + 0x3ff + 52) << 20); # 164| break; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:900:6: warning[deadcode.DeadStores]: Value stored to 'dsign' is never read # 898| #endif /*!_DOUBLE_IS_32BITS*/ # 899| #ifdef Avoid_Underflow # 900|-> dsign = 0; # 901| #endif # 902| break; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:962:4: warning[deadcode.DeadStores]: Value stored to 'dsign' is never read # 960| } # 961| #ifdef Avoid_Underflow # 962|-> dsign = 1 - dsign; # 963| #endif # 964| #endif Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:1176: error[nullPointer]: Null pointer dereference # 1174| double retval = _strtod_r (_REENT, s00, se); # 1175| if (isnan (retval)) # 1176|-> return nanf (NULL); # 1177| return (float)retval; # 1178| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtol.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtoll_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtoul.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtoull_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/system.c:64:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 64 | static int do_system (); # | ^~~~~~ # 62| # 63| #if defined (unix) || defined (__CYGWIN__) # 64|-> static int do_system (); # 65| #endif # 66| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/system.c:121:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 121 | do_system (ptr, s) # | ^~~~~~~~~ # 119| # 120| static int # 121|-> do_system (ptr, s) # 122| struct _reent *ptr; # 123| _CONST char *s; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcsrtombs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstol.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstoll_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstombs_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstoul.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-686): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstoull.c: scope_hint: In function ‘wcstoull’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstoull.c:136:16: warning[-Wimplicit-function-declaration]: implicit declaration of function ‘_wcstoull_r’; did you mean ‘wcstoull’? # 134| int base) # 135| { # 136|-> return _wcstoull_r (_REENT, s, ptr, base); # 137| } # 138| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wcstoull_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-681): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c: scope_hint: In function ‘wctob’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c:19:31: warning[-Wpointer-sign]: pointer targets in passing argument 2 of ‘_wctomb_r’ differ in signedness # 19 | retval = _wctomb_r (_REENT, &pwc, c, &mbs); # | ^~~~ # | | # | unsigned char * xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/include/sys/reent.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/include/reent.h:48: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c:1: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/include/stdlib.h:93:9: note: expected ‘char *’ but argument is of type ‘unsigned char *’ # 93 | int _EXFUN(_wctomb_r,(struct _reent *, char *, wchar_t, _mbstate_t *)); # | ^~~~~~ # 17| _REENT_CHECK_MISC(_REENT); # 18| # 19|-> retval = _wctomb_r (_REENT, &pwc, c, &mbs); # 20| # 21| if (c == EOF || retval != 1) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctomb_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/string/memchr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/string/memset.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/string/wcsstr.c:85:3: warning[deadcode.DeadStores]: Value stored to 'q' is never read # 83| # 84| p = big; # 85|-> q = little; # 86| while (*p) # 87| { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/time/mktime.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/time/mktime.c:68:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 68 | validate_structure (tim_p) # | ^~~~~~~~~~~~~~~~~~ # 66| # 67| static void # 68|-> validate_structure (tim_p) # 69| struct tm *tim_p; # 70| { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/time/mktm_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/time/strftime.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libc/time/tzset_r.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:21: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c: scope_hint: In function ‘__ieee754_rem_pio2’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/fdlibm.h:335:14: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘z’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: note: in expansion of macro ‘SET_LOW_WORD’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: note: in expansion of macro ‘SET_LOW_WORD’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: note: in expansion of macro ‘SET_LOW_WORD’ # 333| do { \ # 334| ieee_double_shape_type sl_u; \ # 335|-> sl_u.value = (d); \ # 336| sl_u.parts.lsw = (v); \ # 337| (d) = sl_u.value; \ Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:21: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c: scope_hint: In function ‘__ieee754_rem_pio2’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/fdlibm.h:335:14: warning[-Wmaybe-uninitialized]: ‘z’ may be used uninitialized # 335 | sl_u.value = (d); \ # | ~~~~~~~~~~~^~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: note: in expansion of macro ‘SET_LOW_WORD’ # 170 | SET_LOW_WORD(z,low); # | ^~~~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:92:16: note: ‘z’ was declared here # 92 | double z,w,t,r,fn; # | ^ # 333| do { \ # 334| ieee_double_shape_type sl_u; \ # 335|-> sl_u.value = (d); \ # 336| sl_u.parts.lsw = (v); \ # 337| (d) = sl_u.value; \ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_expm1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_expm1.c:188:13: warning[deadcode.DeadStores]: Value stored to 'y' is never read # 186| GET_HIGH_WORD(hx,x); # 187| xsb = hx&0x80000000; /* sign bit of x */ # 188|-> if(xsb==0) y=x; else y= -x; /* y = |x| */ # 189| hx &= 0x7fffffff; /* high word of |x| */ # 190| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_expm1.c:188:23: warning[deadcode.DeadStores]: Value stored to 'y' is never read # 186| GET_HIGH_WORD(hx,x); # 187| xsb = hx&0x80000000; /* sign bit of x */ # 188|-> if(xsb==0) y=x; else y= -x; /* y = |x| */ # 189| hx &= 0x7fffffff; /* high word of |x| */ # 190| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_log1p.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_lrint.c:59: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 57| # 58| /* Extract sign bit. */ # 59|-> sx = (i0>>31)&1; # 60| # 61| /* Extract exponent field. */ Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_lrint.c:75: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 73| /* Detect the all-zeros representation of plus and # 74| minus zero, which fails the calculation below. */ # 75|-> if ((i0 & ~(1 << 31)) == 0) # 76| return 0; # 77| j0 = ((i0 & 0x7ff00000) >> 20) - 1023; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_nextafter.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_rint.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_rint.c:50: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 48| volatile double w; # 49| EXTRACT_WORDS(i0,i1,x); # 50|-> sx = (i0>>31)&1; # 51| j0 = ((i0>>20)&0x7ff)-0x3ff; # 52| if(j0<20) { Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/s_rint.c:62: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 60| t = w-TWO52[sx]; # 61| GET_HIGH_WORD(i0,t); # 62|-> SET_HIGH_WORD(t,(i0&0x7fffffff)|(sx<<31)); # 63| return t; # 64| } else { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_expm1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_expm1.c:53:13: warning[deadcode.DeadStores]: Value stored to 'y' is never read # 51| GET_FLOAT_WORD(hx,x); # 52| xsb = hx&0x80000000; /* sign bit of x */ # 53|-> if(xsb==0) y=x; else y= -x; /* y = |x| */ # 54| hx &= 0x7fffffff; /* high word of |x| */ # 55| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_expm1.c:53:23: warning[deadcode.DeadStores]: Value stored to 'y' is never read # 51| GET_FLOAT_WORD(hx,x); # 52| xsb = hx&0x80000000; /* sign bit of x */ # 53|-> if(xsb==0) y=x; else y= -x; /* y = |x| */ # 54| hx &= 0x7fffffff; /* high word of |x| */ # 55| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_expm1.c:114:6: warning[deadcode.DeadStores]: Value stored to 't' is never read # 112| return y-one; # 113| } # 114|-> t = one; # 115| if(k<23) { # 116| __int32_t i; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_log1p.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_lrint.c:74: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 72| /* Detect the all-zeros representation of plus and # 73| minus zero, which fails the calculation below. */ # 74|-> if ((i0 & ~(1 << 31)) == 0) # 75| return 0; # 76| j0 = ((i0 >> 23) & 0xff) - 0x7f; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_nextafter.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_rint.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_rint.c:40: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 38| volatile float w; # 39| GET_FLOAT_WORD(i0,x); # 40|-> sx = (i0>>31)&1; # 41| ix = (i0&0x7fffffff); # 42| j0 = (ix>>23)-0x7f; Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_rint.c:54: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 52| t = w-TWO23[sx]; # 53| GET_FLOAT_WORD(i0,t); # 54|-> SET_FLOAT_WORD(t,(i0&0x7fffffff)|(sx<<31)); # 55| return t; # 56| } else { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/common/sf_round.c:29:3: warning[deadcode.DeadStores]: Value stored to 'signbit' is never read # 27| # 28| /* Extract sign bit. */ # 29|-> signbit = w & 0x80000000; # 30| # 31| /* Extract exponent field. */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-569): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c: scope_hint: In function ‘__ieee754_atan2’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c:76:15: warning[-Wparentheses]: suggest parentheses around arithmetic in operand of ‘|’ # 76 | if((hx-0x3ff00000|lx)==0) return atan(y); /* x=1.0 */ # | ~~^~~~~~~~~~~ # 74| ((iy|((ly|-ly)>>31))>0x7ff00000)) /* x or y is NaN */ # 75| return x+y; # 76|-> if((hx-0x3ff00000|lx)==0) return atan(y); /* x=1.0 */ # 77| m = ((hy>>31)&1)|((hx>>30)&2); /* 2*sign(x)+sign(y) */ # 78| Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c:77: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 75| return x+y; # 76| if((hx-0x3ff00000|lx)==0) return atan(y); /* x=1.0 */ # 77|-> m = ((hy>>31)&1)|((hx>>30)&2); /* 2*sign(x)+sign(y) */ # 78| # 79| /* when y = 0 */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_atanh.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152: error[legacyUninitvar]: Uninitialized variable: k # 150| t = x*x; # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152|-> if(k==0) return one-((x*c)/(c-2.0)-x); # 153| else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152:6: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value # 150| t = x*x; # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152|-> if(k==0) return one-((x*c)/(c-2.0)-x); # 153| else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c: scope_hint: In function ‘__ieee754_exp’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘k’ # 150| t = x*x; # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152|-> if(k==0) return one-((x*c)/(c-2.0)-x); # 153| else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152:11: warning[-Wmaybe-uninitialized]: ‘k’ may be used uninitialized # 152 | if(k==0) return one-((x*c)/(c-2.0)-x); # | ^ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:112:19: note: ‘k’ was declared here # 112 | __int32_t k,xsb; # | ^ # 150| t = x*x; # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152|-> if(k==0) return one-((x*c)/(c-2.0)-x); # 153| else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:153:37: warning[-Wmaybe-uninitialized]: ‘lo’ may be used uninitialized # 153 | else y = one-((lo-(x*c)/(2.0-c))-hi); # | ~~~^~~~~~~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:111:21: note: ‘lo’ was declared here # 111 | double y,hi,lo,c,t; # | ^~ # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152| if(k==0) return one-((x*c)/(c-2.0)-x); # 153|-> else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { # 155| __uint32_t hy; Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c: scope_hint: In function ‘__ieee754_exp’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:153:52: warning[-Wmaybe-uninitialized]: ‘hi’ may be used uninitialized # 153 | else y = one-((lo-(x*c)/(2.0-c))-hi); # | ~~~~~~~~~~~~~~~~~~~^~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:111:18: note: ‘hi’ was declared here # 111 | double y,hi,lo,c,t; # | ^~ # 151| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 152| if(k==0) return one-((x*c)/(c-2.0)-x); # 153|-> else y = one-((lo-(x*c)/(2.0-c))-hi); # 154| if(k >= -1021) { # 155| __uint32_t hy; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_fmod.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_hypot.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_j0.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_j1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_jn.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_jn.c:84: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 82| if(n==0) return(__ieee754_j0(x)); # 83| if(n==1) return(__ieee754_j1(x)); # 84|-> sgn = (n&1)&(hx>>31); /* even n -- 0, odd n -- sign(x) */ # 85| x = fabs(x); # 86| if((ix|lx)==0||ix>=0x7ff00000) /* if x is 0 or inf */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_pow.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-691): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_pow.c: scope_hint: In function ‘__ieee754_pow’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_pow.c:122:11: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’ # 122 | if(ix > 0x7ff00000 || ((ix==0x7ff00000)&&(lx!=0)) || # | ^ # 120| # 121| /* x|y==NaN return NaN unless x==1 then return 1 */ # 122|-> if(ix > 0x7ff00000 || ((ix==0x7ff00000)&&(lx!=0)) || # 123| iy > 0x7ff00000 || ((iy==0x7ff00000)&&(ly!=0))) # 124| if(((ix-0x3ff00000)|lx)==0) return one; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:2: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 168| /* set z = scalbn(|x|,ilogb(x)-23) */ # 169| GET_LOW_WORD(low,x); # 170|-> SET_LOW_WORD(z,low); # 171| e0 = (int)((ix>>20)-1046); /* e0 = ilogb(z)-23; */ # 172| SET_HIGH_WORD(z, ix - ((__int32_t)e0<<20)); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_remainder.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_sinh.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_sqrt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/e_sqrt.c:128:17: warning[core.BitwiseShift]: Right shift by '32' overflows the capacity of '__uint32_t' # 126| for(i=0;(ix0&0x00100000)==0;i++) ix0<<=1; # 127| m -= i-1; # 128|-> ix0 |= (ix1>>(32-i)); # 129| ix1 <<= i; # 130| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_asin.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_atan2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_atan2.c:49: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 47| return x+y; # 48| if(hx==0x3f800000) return atanf(y); /* x=1.0 */ # 49|-> m = ((hy>>31)&1)|((hx>>30)&2); /* 2*sign(x)+sign(y) */ # 50| # 51| /* when y = 0 */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_atanh.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:54: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 52| # 53| GET_FLOAT_WORD(sx,x); # 54|-> xsb = (sx>>31)&1; /* sign bit of x */ # 55| hx = sx & 0x7fffffff; /* high word of |x| */ # 56| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:87:6: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value # 85| t = x*x; # 86| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 87|-> if(k==0) return one-((x*c)/(c-(float)2.0)-x); # 88| else y = one-((lo-(x*c)/((float)2.0-c))-hi); # 89| if(k >= -125) { Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c: scope_hint: In function ‘__ieee754_expf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:87:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘k’ # 85| t = x*x; # 86| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 87|-> if(k==0) return one-((x*c)/(c-(float)2.0)-x); # 88| else y = one-((lo-(x*c)/((float)2.0-c))-hi); # 89| if(k >= -125) { Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:87:11: warning[-Wmaybe-uninitialized]: ‘k’ may be used uninitialized # 87 | if(k==0) return one-((x*c)/(c-(float)2.0)-x); # | ^ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:50:19: note: ‘k’ was declared here # 50 | __int32_t k,xsb,sx; # | ^ # 85| t = x*x; # 86| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 87|-> if(k==0) return one-((x*c)/(c-(float)2.0)-x); # 88| else y = one-((lo-(x*c)/((float)2.0-c))-hi); # 89| if(k >= -125) { Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:88:37: warning[-Wmaybe-uninitialized]: ‘lo’ may be used uninitialized # 88 | else y = one-((lo-(x*c)/((float)2.0-c))-hi); # | ~~~^~~~~~~~~~~~~~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:49:20: note: ‘lo’ was declared here # 49 | float y,hi,lo,c,t; # | ^~ # 86| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 87| if(k==0) return one-((x*c)/(c-(float)2.0)-x); # 88|-> else y = one-((lo-(x*c)/((float)2.0-c))-hi); # 89| if(k >= -125) { # 90| __uint32_t hy; Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c: scope_hint: In function ‘__ieee754_expf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:88:59: warning[-Wmaybe-uninitialized]: ‘hi’ may be used uninitialized # 88 | else y = one-((lo-(x*c)/((float)2.0-c))-hi); # | ~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:49:17: note: ‘hi’ was declared here # 49 | float y,hi,lo,c,t; # | ^~ # 86| c = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5)))); # 87| if(k==0) return one-((x*c)/(c-(float)2.0)-x); # 88|-> else y = one-((lo-(x*c)/((float)2.0-c))-hi); # 89| if(k >= -125) { # 90| __uint32_t hy; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_fmod.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_hypot.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_hypot.c:32:15: warning[deadcode.DeadStores]: Value stored to 'a' is never read # 30| GET_FLOAT_WORD(hb,y); # 31| hb &= 0x7fffffffL; # 32|-> if(hb > ha) {a=y;b=x;j=ha; ha=hb;hb=j;} else {a=x;b=y;} # 33| SET_FLOAT_WORD(a,ha); /* a <- |a| */ # 34| SET_FLOAT_WORD(b,hb); /* b <- |b| */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_hypot.c:32:19: warning[deadcode.DeadStores]: Value stored to 'b' is never read # 30| GET_FLOAT_WORD(hb,y); # 31| hb &= 0x7fffffffL; # 32|-> if(hb > ha) {a=y;b=x;j=ha; ha=hb;hb=j;} else {a=x;b=y;} # 33| SET_FLOAT_WORD(a,ha); /* a <- |a| */ # 34| SET_FLOAT_WORD(b,hb); /* b <- |b| */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_hypot.c:32:48: warning[deadcode.DeadStores]: Value stored to 'a' is never read # 30| GET_FLOAT_WORD(hb,y); # 31| hb &= 0x7fffffffL; # 32|-> if(hb > ha) {a=y;b=x;j=ha; ha=hb;hb=j;} else {a=x;b=y;} # 33| SET_FLOAT_WORD(a,ha); /* a <- |a| */ # 34| SET_FLOAT_WORD(b,hb); /* b <- |b| */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_hypot.c:32:52: warning[deadcode.DeadStores]: Value stored to 'b' is never read # 30| GET_FLOAT_WORD(hb,y); # 31| hb &= 0x7fffffffL; # 32|-> if(hb > ha) {a=y;b=x;j=ha; ha=hb;hb=j;} else {a=x;b=y;} # 33| SET_FLOAT_WORD(a,ha); /* a <- |a| */ # 34| SET_FLOAT_WORD(b,hb); /* b <- |b| */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_j0.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_j1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_jn.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_jn.c:23:1: warning[-Wunused-const-variable=]: ‘invsqrtpi’ defined but not used # 23 | invsqrtpi= 5.6418961287e-01, /* 0x3f106ebb */ # | ^~~~~~~~~ # 21| static float # 22| #endif # 23|-> invsqrtpi= 5.6418961287e-01, /* 0x3f106ebb */ # 24| two = 2.0000000000e+00, /* 0x40000000 */ # 25| one = 1.0000000000e+00; /* 0x3F800000 */ Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_jn.c:58: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 56| if(n==0) return(__ieee754_j0f(x)); # 57| if(n==1) return(__ieee754_j1f(x)); # 58|-> sgn = (n&1)&(hx>>31); /* even n -- 0, odd n -- sign(x) */ # 59| x = fabsf(x); # 60| if(FLT_UWORD_IS_ZERO(ix)||FLT_UWORD_IS_INFINITE(ix)) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_pow.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-691): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_pow.c: scope_hint: In function ‘__ieee754_powf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_pow.c:79:11: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’ # 79 | if(FLT_UWORD_IS_NAN(ix) || # | ^ # 77| # 78| /* x|y==NaN return NaN unless x==1 then return 1 */ # 79|-> if(FLT_UWORD_IS_NAN(ix) || # 80| FLT_UWORD_IS_NAN(iy)) # 81| if(ix==0x3f800000) return one; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_rem_pio2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_rem_pio2.c:189:16: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds # 187| tx[2] = z; # 188| nx = 3; # 189|-> while(tx[nx-1]==zero) nx--; /* skip zero term */ # 190| n = __kernel_rem_pio2f(tx,y,e0,nx,2,two_over_pi); # 191| if(hx<0) {y[0] = -y[0]; y[1] = -y[1]; return -n;} Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_remainder.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_sinh.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_sqrt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_sqrt.c: scope_hint: In function ‘__ieee754_sqrtf’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/ef_sqrt.c:32:25: warning[-Wunused-variable]: unused variable ‘sign’ # 32 | __int32_t sign = (__int32_t)0x80000000; # | ^~~~ # 30| { # 31| float z; # 32|-> __int32_t sign = (__int32_t)0x80000000; # 33| __uint32_t r,hx; # 34| __int32_t ix,s,q,m,t,i; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c:283:6: warning[deadcode.DeadStores]: Value stored to 't' is never read # 281| else if(ix<0x40200000) { /* x < 8.0 */ # 282| i = (__int32_t)x; # 283|-> t = zero; # 284| y = x-(double)i; # 285| p = y*(s0+y*(s1+y*(s2+y*(s3+y*(s4+y*(s5+y*s6)))))); Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c: scope_hint: In function ‘__ieee754_lgamma_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c:307:20: warning[-Wmaybe-uninitialized]: ‘nadj’ may be used uninitialized # 307 | if(hx<0) r = nadj - r; # | ~~^~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c:219:22: note: ‘nadj’ was declared here # 219 | double t,y,z,nadj,p,p1,p2,p3,q,r,w; # | ^~~~ # 305| /* 2**58 <= x <= inf */ # 306| r = x*(__ieee754_log(x)-one); # 307|-> if(hx<0) r = nadj - r; # 308| return r; # 309| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c:218:6: warning[deadcode.DeadStores]: Value stored to 't' is never read # 216| else if(ix<0x41000000) { /* x < 8.0 */ # 217| i = (__int32_t)x; # 218|-> t = zero; # 219| y = x-(float)i; # 220| p = y*(s0+y*(s1+y*(s2+y*(s3+y*(s4+y*(s5+y*s6)))))); Error: COMPILER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c: scope_hint: In function ‘__ieee754_lgammaf_r’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c:242:20: warning[-Wmaybe-uninitialized]: ‘nadj’ may be used uninitialized # 242 | if(hx<0) r = nadj - r; # | ~~^~~~~~~~~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c:154:21: note: ‘nadj’ was declared here # 154 | float t,y,z,nadj,p,p1,p2,p3,q,r,w; # | ^~~~ # 240| /* 2**58 <= x <= inf */ # 241| r = x*(__ieee754_logf(x)-one); # 242|-> if(hx<0) r = nadj - r; # 243| return r; # 244| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-483): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:190:13: warning[-Wmisleading-indentation]: this ‘for’ clause does not guard... # 190 | for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # | ^~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:190:61: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘for’ # 190 | for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # | ^ # 188| /* compute q[0],q[1],...q[jk] */ # 189| for (i=0;i<=jk;i++) { # 190|-> for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # 191| } # 192| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:190:42: warning[core.UndefinedBinaryOperatorResult]: The right operand of '*' is a garbage value # 188| /* compute q[0],q[1],...q[jk] */ # 189| for (i=0;i<=jk;i++) { # 190|-> for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # 191| } # 192| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:209:20: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value due to array index out of bounds # 207| ih = 0; # 208| if(q0>0) { /* need iq[jz-1] to determine n */ # 209|-> i = (iq[jz-1]>>(24-q0)); n += i; # 210| iq[jz-1] -= i<<(24-q0); # 211| ih = iq[jz-1]>>(23-q0); Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:209:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘iq[<unknown>]’ # 207| ih = 0; # 208| if(q0>0) { /* need iq[jz-1] to determine n */ # 209|-> i = (iq[jz-1]>>(24-q0)); n += i; # 210| iq[jz-1] -= i<<(24-q0); # 211| ih = iq[jz-1]>>(23-q0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:213:30: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value due to array index out of bounds # 211| ih = iq[jz-1]>>(23-q0); # 212| } # 213|-> else if(q0==0) ih = iq[jz-1]>>23; # 214| else if(z>=0.5) ih=2; # 215| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:245:19: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds # 243| for (i=jz-1;i>=jk;i--) j |= iq[i]; # 244| if(j==0) { /* need recomputation */ # 245|-> for(k=1;iq[jk-k]==0;k++); /* k = no. of terms needed */ # 246| # 247| for(i=jz+1;i<=jz+k;i++) { /* add q[jz+1] to q[jz+k] */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:260:18: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds # 258| if(z==0.0) { # 259| jz -= 1; q0 -= 24; # 260|-> while(iq[jz]==0) { jz--; q0-=24;} # 261| } else { /* break z into 24-bit if necessary */ # 262| z = scalbn(z,-(int)q0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:274:15: warning[core.UndefinedBinaryOperatorResult]: The right operand of '*' is a garbage value due to array index out of bounds # 272| fw = scalbn(one,(int)q0); # 273| for(i=jz;i>=0;i--) { # 274|-> q[i] = fw*(double)iq[i]; fw*=twon24; # 275| } # 276| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:295:13: warning[core.UndefinedBinaryOperatorResult]: The left operand of '-' is a garbage value # 293| for (i=jz;i>=0;i--) fw += fq[i]; # 294| y[0] = (ih==0)? fw: -fw; # 295|-> fw = fq[0]-fw; # 296| for (i=1;i<=jz;i++) fw += fq[i]; # 297| y[1] = (ih==0)? fw: -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:312:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 310| for (fw=0.0,i=jz;i>=2;i--) fw += fq[i]; # 311| if(ih==0) { # 312|-> y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 313| } else { # 314| y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:312:27: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 310| for (fw=0.0,i=jz;i>=2;i--) fw += fq[i]; # 311| if(ih==0) { # 312|-> y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 313| } else { # 314| y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:314:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 312| y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 313| } else { # 314|-> y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; # 315| } # 316| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:314:27: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 312| y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 313| } else { # 314|-> y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; # 315| } # 316| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/k_standard.c:781:2: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller # 779| if (exc.err != 0) # 780| errno = exc.err; # 781|-> return exc.retval; # 782| } # 783| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-483): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2f’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:80:13: warning[-Wmisleading-indentation]: this ‘for’ clause does not guard... # 80 | for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # | ^~~ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:80:61: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘for’ # 80 | for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # | ^ # 78| /* compute q[0],q[1],...q[jk] */ # 79| for (i=0;i<=jk;i++) { # 80|-> for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # 81| } # 82| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:80:42: warning[core.UndefinedBinaryOperatorResult]: The right operand of '*' is a garbage value # 78| /* compute q[0],q[1],...q[jk] */ # 79| for (i=0;i<=jk;i++) { # 80|-> for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw; # 81| } # 82| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:99:20: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value due to array index out of bounds # 97| ih = 0; # 98| if(q0>0) { /* need iq[jz-1] to determine n */ # 99|-> i = (iq[jz-1]>>(8-q0)); n += i; # 100| iq[jz-1] -= i<<(8-q0); # 101| ih = iq[jz-1]>>(7-q0); Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2f’ xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:99:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘iq[<unknown>]’ # 97| ih = 0; # 98| if(q0>0) { /* need iq[jz-1] to determine n */ # 99|-> i = (iq[jz-1]>>(8-q0)); n += i; # 100| iq[jz-1] -= i<<(8-q0); # 101| ih = iq[jz-1]>>(7-q0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:103:30: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value due to array index out of bounds # 101| ih = iq[jz-1]>>(7-q0); # 102| } # 103|-> else if(q0==0) ih = iq[jz-1]>>8; # 104| else if(z>=(float)0.5) ih=2; # 105| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:135:19: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds # 133| for (i=jz-1;i>=jk;i--) j |= iq[i]; # 134| if(j==0) { /* need recomputation */ # 135|-> for(k=1;iq[jk-k]==0;k++); /* k = no. of terms needed */ # 136| # 137| for(i=jz+1;i<=jz+k;i++) { /* add q[jz+1] to q[jz+k] */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:150:18: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds # 148| if(z==(float)0.0) { # 149| jz -= 1; q0 -= 8; # 150|-> while(iq[jz]==0) { jz--; q0-=8;} # 151| } else { /* break z into 8-bit if necessary */ # 152| z = scalbnf(z,-(int)q0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:164:15: warning[core.UndefinedBinaryOperatorResult]: The right operand of '*' is a garbage value due to array index out of bounds # 162| fw = scalbnf(one,(int)q0); # 163| for(i=jz;i>=0;i--) { # 164|-> q[i] = fw*(float)iq[i]; fw*=twon8; # 165| } # 166| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:185:13: warning[core.UndefinedBinaryOperatorResult]: The left operand of '-' is a garbage value # 183| for (i=jz;i>=0;i--) fw += fq[i]; # 184| y[0] = (ih==0)? fw: -fw; # 185|-> fw = fq[0]-fw; # 186| for (i=1;i<=jz;i++) fw += fq[i]; # 187| y[1] = (ih==0)? fw: -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:202:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 200| for (fw=0.0,i=jz;i>=2;i--) fw += fq[i]; # 201| if(ih==0) { # 202|-> y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 203| } else { # 204| y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:202:27: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 200| for (fw=0.0,i=jz;i>=2;i--) fw += fq[i]; # 201| if(ih==0) { # 202|-> y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 203| } else { # 204| y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:204:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 202| y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 203| } else { # 204|-> y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; # 205| } # 206| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:204:27: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 202| y[0] = fq[0]; y[1] = fq[1]; y[2] = fw; # 203| } else { # 204|-> y[0] = -fq[0]; y[1] = -fq[1]; y[2] = -fw; # 205| } # 206| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/s_ceil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/s_erf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/s_floor.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/sf_cos.c:19:20: warning[-Wunused-const-variable=]: ‘one’ defined but not used # 19 | static const float one=1.0; # | ^~~ # 17| # 18| #ifdef __STDC__ # 19|-> static const float one=1.0; # 20| #else # 21| static float one=1.0; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/sf_erf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/w_cabs.c:16:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 16 | cabs(z) # | ^~~~ # 14| # 15| double # 16|-> cabs(z) # 17| struct complex z; # 18| { Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/wf_cabs.c:16:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype # 16 | cabsf(z) # | ^~~~~ # 14| # 15| float # 16|-> cabsf(z) # 17| struct complex z; # 18| { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/newlib-1.16.0/newlib/libm/math/wf_pow.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c: scope_hint: In function ‘pci_alloc’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c:73:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘a’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 71| int i; # 72| # 73|-> memset(a, 0, sizeof(*a)); # 74| pci_set_name_list_path(a, PCI_PATH_IDS_DIR "/" PCI_IDS, 0); # 75| for(i=0; i<PCI_ACCESS_MAX; i++) Error: GCC_ANALYZER_WARNING (CWE-404): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c: scope_hint: In function ‘pci_generic_warn’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c:119:1: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’ # 117| vfprintf(stderr, msg, args); # 118| fputc('\n', stderr); # 119|-> } # 120| # 121| static void Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c:173:35: warning[core.NullDereference]: Access to field 'name' results in a dereference of a null pointer (loaded from field 'methods') # 171| a->error("Cannot find any working access method."); # 172| } # 173|-> a->debug("Decided to use %s\n", a->methods->name); # 174| a->methods->init(a); # 175| } Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c: scope_hint: In function ‘pci_alloc_dev’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/access.c:205:3: warning[-Wanalyzer-null-argument]: use of NULL ‘d’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 203| struct pci_dev *d = pci_malloc(a, sizeof(struct pci_dev)); # 204| # 205|-> memset(d, 0, sizeof(*d)); # 206| d->access = a; # 207| d->methods = a->methods; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c: scope_hint: In function ‘dump_validate’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c:44:7: warning[-Wunused-value]: value computed is not used # 44 | *fmt++, *s++; # | ^~~~~~ # 42| if (*fmt == '#' ? !isxdigit(*s) : *fmt != *s) # 43| return 0; # 44|-> *fmt++, *s++; # 45| } # 46| return 1; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c: scope_hint: In function ‘dump_init’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c:67:12: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘z’ # 65| if (!z) # 66| a->error("dump: line too long or unterminated"); # 67|-> *z-- = 0; # 68| if (z >= buf && *z == '\r') # 69| *z-- = 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c:67:12: warning[core.NullDereference]: Dereference of null pointer # 65| if (!z) # 66| a->error("dump: line too long or unterminated"); # 67|-> *z-- = 0; # 68| if (z >= buf && *z == '\r') # 69| *z-- = 0; Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/dump.c:110:1: warning[-Wanalyzer-file-leak]: leak of FILE ‘f’ # 108| } # 109| } # 110|-> } # 111| # 112| static void Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/filter.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c: scope_hint: In function ‘pci_generic_fill_info’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c:134:27: warning[-Wunused-variable]: unused variable ‘size’ # 134 | u32 size; # | ^~~~ # 132| if (flags & PCI_FILL_SIZES) # 133| { # 134|-> u32 size; # 135| pci_write_long(d, PCI_BASE_ADDRESS_0 + i*4, ~0); # 136| d->size[i] = pci_size(x, pci_read_long(d, PCI_BASE_ADDRESS_0 + i*4), PCI_BASE_ADDRESS_IO_MASK); Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c:147:31: warning[-Wunused-variable]: unused variable ‘size’ # 147 | u32 size; # | ^~~~ # 145| if (flags & PCI_FILL_SIZES) # 146| { # 147|-> u32 size; # 148| pci_write_long(d, PCI_BASE_ADDRESS_0 + i*4, ~0); # 149| d->size[i] = pci_read_long(d, PCI_BASE_ADDRESS_0 + i*4); Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c:179:35: warning[-Wunused-variable]: unused variable ‘size’ # 179 | u32 size; # | ^~~~ # 177| if (flags & PCI_FILL_SIZES) # 178| { # 179|-> u32 size; # 180| pci_write_long(d, PCI_BASE_ADDRESS_0 + (i-1)*4, ~0); # 181| d->size[i-1] = pci_size(x, pci_read_long(d, PCI_BASE_ADDRESS_0 + (i-1)*4), PCI_BASE_ADDRESS_MEM_MASK); Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/generic.c:212:23: warning[-Wunused-variable]: unused variable ‘size’ # 212 | u32 size; # | ^~~~ # 210| if (flags & PCI_FILL_SIZES) # 211| { # 212|-> u32 size; # 213| pci_write_long(d, reg, ~0); # 214| d->rom_size = pci_read_long(d, reg); Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_detect’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c:15:34: warning[-Wunused-parameter]: unused parameter ‘a’ # 15 | minios_detect(struct pci_access *a) # | ~~~~~~~~~~~~~~~~~~~^ # 13| # 14| static int # 15|-> minios_detect(struct pci_access *a) # 16| { # 17| return 1; Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_init’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c:21:32: warning[-Wunused-parameter]: unused parameter ‘a’ # 21 | minios_init(struct pci_access *a) # | ~~~~~~~~~~~~~~~~~~~^ # 19| # 20| static void # 21|-> minios_init(struct pci_access *a) # 22| { # 23| } Error: COMPILER_WARNING (CWE-563): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_cleanup’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/minios.c:26:35: warning[-Wunused-parameter]: unused parameter ‘a’ # 26 | minios_cleanup(struct pci_access *a) # | ~~~~~~~~~~~~~~~~~~~^ # 24| # 25| static void # 26|-> minios_cleanup(struct pci_access *a) # 27| { # 28| shutdown_pcifront(NULL); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/names.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/names.c: scope_hint: In function ‘pci_open’ xen-4.18.1-build/xen-4.18.1/stubdom/pciutils-x86_64/lib/names.c:36:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘new_name’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 34| return result; # 35| new_name = malloc(len - 2); # 36|-> memcpy(new_name, a->id_file_name, len - 3); # 37| new_name[len - 3] = 0; # 38| pci_set_name_list_path(a, new_name, 1); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/deflate.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/deflate.c:352:20: warning[deadcode.DeadStores]: Value stored to 'hash_head' is never read # 350| INSERT_STRING(s, n, hash_head); # 351| } # 352|-> if (hash_head) hash_head = 0; /* to make compiler happy */ # 353| return Z_OK; # 354| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/gzio.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/infback.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/inflate.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/inftrees.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/stubdom/zlib-x86_64/trees.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c: scope_hint: In function ‘console_loop’ xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c:200:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’ /usr/include/sys/select.h:30: included_from: Included from here. /usr/include/sys/types.h:179: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c:21: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c:27: included_from: Included from here. # 198| continue; # 199| } # 200|-> return -1; # 201| } # 202| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/client/main.c:476:2: warning[deadcode.DeadStores]: Value stored to 'xsfd' is never read # 474| if (!xs_watch(xs, path, "")) # 475| err(errno, "Can't set watch for console pty"); # 476|-> xsfd = xs_fileno(xs); # 477| # 478| /* Wait a little bit for tty to appear. There is a race Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c:204: warning[uninitvar]: Uninitialized variable: ret # 202| break; # 203| } # 204|-> return ret; # 205| } # 206| Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c:226: warning[uninitvar]: Uninitialized variable: ret # 224| break; # 225| } # 226|-> return ret; # 227| } # 228| Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c:1399: error[legacyUninitvar]: Uninitialized variable: poll_timeout # 1397| } # 1398| # 1399|-> ret = poll(fds, nr_fds, next_timeout ? poll_timeout : -1); # 1400| # 1401| if (log_reload) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c:1444:4: warning[deadcode.DeadStores]: Value stored to 'xs_pollfd_idx' is never read # 1442| handle_xs(); # 1443| # 1444|-> xs_pollfd_idx = -1; # 1445| } # 1446| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/daemon/io.c:1483:2: warning[deadcode.DeadStores]: Value stored to 'log_hv_evtchn' is never read # 1481| xfm_handle = NULL; # 1482| } # 1483|-> log_hv_evtchn = -1; # 1484| } # 1485| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/daemon/main.c:119:15: warning[unix.Malloc]: Potential leak of memory pointed to by 'pidfile' # 117| char *pidfile = NULL; # 118| # 119|-> while ((ch = getopt_long(argc, argv, sopts, lopts, &opt_ind)) != -1) { # 120| switch (ch) { # 121| case 'h': Error: GCC_ANALYZER_WARNING: xen-4.18.1-build/xen-4.18.1/tools/console/daemon/utils.c: scope_hint: In function ‘daemonize’ xen-4.18.1-build/xen-4.18.1/tools/console/daemon/utils.c:75:17: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘i’ # 73| for (i = 0; i <= 2; i++) { # 74| close(i); # 75|-> dup2(fd, i); # 76| } # 77| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_comm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_comm.c:169:5: warning[deadcode.DeadStores]: Value stored to 'll' is never read # 167| # 168| bufcnt = read(remote_fd, buf, sizeof (buf)); # 169|-> ll = *(uint64_t *)buf; # 170| if (bufcnt <= 0) { # 171| if (bufcnt == 0) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_comm.c: scope_hint: In function ‘gx_putpkt’ xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_comm.c:286:10: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘buf2’ # 284| # 285| p = buf2; # 286|-> *p++ = '$'; # 287| # 288| for (i = 0; i < cnt; i++) { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_main.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/debugger/gdbsx/gx/gx_main.c:673:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'remote_buf' # 671| * connection from remote gdb */ # 672| if (gx_remote_open(argv[4]) == -1) { # 673|-> xg_detach_deinit(); # 674| return 1; # 675| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/debugger/kdd/kdd.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-823): xen-4.18.1-build/xen-4.18.1/tools/debugger/kdd/kdd.c:816: error[arrayIndexOutOfBounds]: Array 's->txb[56]' accessed at index 271, which is out of bounds. # 814| /* XXX debug pattern */ # 815| for (i = 0; i < 0x100 ; i++) # 816|-> s->txb[sizeof (kdd_hdr) + i] = i; # 817| } # 818| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/cacheattr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/e820.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/hvm_param.c:22:16: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 20| ret = hypercall_hvm_op(HVMOP_get_param, &p); # 21| if (ret == 0) # 22|-> *value = p.value; # 23| # 24| return ret; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/hvmloader.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/hvmloader.c:22: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/hvmloader.c: scope_hint: In function ‘main’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/hvmloader.c:332:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.h:39:28: note: in definition of macro ‘BUG_ON’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.h:39:28: note: in definition of macro ‘BUG_ON’ # 330| # 331| printf("HVM Loader\n"); # 332|-> BUG_ON(hvm_start_info->magic != XEN_HVM_START_MAGIC_VALUE); # 333| # 334| init_hypercalls(); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/pci.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/pci.c:242:13: warning[deadcode.DeadStores]: Value stored to 'bar_sz_upper' is never read # 240| for ( bar = 0; bar < 7; bar++ ) # 241| { # 242|-> bar_sz_upper = 0; # 243| bar_reg = PCI_BASE_ADDRESS_0 + 4*bar; # 244| if ( bar == 6 ) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/smbios.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/smbios.c:310:5: warning[deadcode.DeadStores]: Value stored to 'p' is never read # 308| goto error_out; # 309| strcpy(p, xen_extra_version); # 310|-> p += tmp_len; # 311| # 312| xen_version_str[sizeof(xen_version_str)-1] = '\0'; Error: CPPCHECK_WARNING (CWE-570): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/smp.c:125: error[subtractPointers]: Subtracting pointers that point to different objects # 123| unsigned int i, nr_cpus = hvm_info->nr_vcpus; # 124| # 125|-> memcpy((void *)AP_BOOT_EIP, ap_boot_start, ap_boot_end - ap_boot_start); # 126| # 127| printf("Multiprocessor initialisation:\n"); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-686): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:596:23: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘long unsigned int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:797:9: note: in expansion of macro ‘BUG’ # 594| if ( lflag ) # 595| { # 596|-> value = va_arg(ap, unsigned long); # 597| if ( (c == 'd') && ((long)value < 0) ) # 598| { Error: GCC_ANALYZER_WARNING (CWE-685): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:596:23: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed) xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ # 594| if ( lflag ) # 595| { # 596|-> value = va_arg(ap, unsigned long); # 597| if ( (c == 'd') && ((long)value < 0) ) # 598| { Error: GCC_ANALYZER_WARNING (CWE-686): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:605:23: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘long unsigned int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:797:9: note: in expansion of macro ‘BUG’ # 603| else # 604| { # 605|-> value = va_arg(ap, unsigned int); # 606| if ( (c == 'd') && ((int)value < 0) ) # 607| { Error: GCC_ANALYZER_WARNING (CWE-685): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:605:23: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed) xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ # 603| else # 604| { # 605|-> value = va_arg(ap, unsigned int); # 606| if ( (c == 'd') && ((int)value < 0) ) # 607| { Error: GCC_ANALYZER_WARNING (CWE-686): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:628:17: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘char *’ but received ‘int’ for variadic argument 2 of ‘ap’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:797:9: note: in expansion of macro ‘BUG’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ # 626| else if ( c == 's' ) # 627| { # 628|-> str = va_arg(ap, char *); # 629| slen = strlen(str); # 630| if ( nflag == 0 ) Error: GCC_ANALYZER_WARNING (CWE-685): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:628:17: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed) xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ # 626| else if ( c == 's' ) # 627| { # 628|-> str = va_arg(ap, char *); # 629| slen = strlen(str); # 630| if ( nflag == 0 ) Error: GCC_ANALYZER_WARNING (CWE-686): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:641:34: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:797:9: note: in expansion of macro ‘BUG’ # 639| else if ( c == 'c' ) # 640| { # 641|-> emit(arg, va_arg(ap, int)); # 642| } # 643| else Error: GCC_ANALYZER_WARNING (CWE-685): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c:641:34: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed) xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/util.c: scope_hint: In function ‘_doprint’ # 639| else if ( c == 'c' ) # 640| { # 641|-> emit(arg, va_arg(ap, int)); # 642| } # 643| else Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c: scope_hint: In function ‘ring_write.part.0’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c:124:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘data + done’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c:28: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c:188:5: note: in expansion of macro ‘ASSERT’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c: scope_hint: In function ‘ring_write.part.0’ xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c:33: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/firmware/hvmloader/xenbus.c:118:43: note: in expansion of macro ‘MASK_XENSTORE_IDX’ # 122| part = len; # 123| # 124|-> memcpy(rings->req + MASK_XENSTORE_IDX(rings->req_prod), # 125| data + done, part); # 126| barrier(); /* = wmb before prod write, rmb before next cons read */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:277:46: warning[-Wanalyzer-malloc-leak]: leak of ‘yy_create_buffer(zconf_fopen(*file.name), 16384)’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 275| */ # 276| #define YY_CURRENT_BUFFER ( (yy_buffer_stack) \ # 277|-> ? (yy_buffer_stack)[(yy_buffer_stack_top)] \ # 278| : NULL) # 279| /* Same as previous macro, but useful when we know that the buffer stack is not Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3416:46: warning[-Wanalyzer-malloc-leak]: leak of ‘*b.yy_ch_buf’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3580:38: note: in expansion of macro ‘YY_CURRENT_BUFFER_LVALUE’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ # 3414| b->yy_buf_size *= 2; # 3415| # 3416|-> b->yy_ch_buf = (char *) # 3417| /* Include room in for 2 EOB chars. */ # 3418| yyrealloc( (void *) b->yy_ch_buf, Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3672:12: warning[-Wanalyzer-file-leak]: leak of FILE xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 3670| */ # 3671| yyensure_buffer_stack (); # 3672|-> if ( YY_CURRENT_BUFFER == new_buffer ) # 3673| return; # 3674| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3672:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 3670| */ # 3671| yyensure_buffer_stack (); # 3672|-> if ( YY_CURRENT_BUFFER == new_buffer ) # 3673| return; # 3674| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3722:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_create_buffer’ # 3720| */ # 3721| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) ); # 3722|-> if ( ! b->yy_ch_buf ) # 3723| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); # 3724| Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3762: warning[nullPointer]: Possible null pointer dereference: b # 3760| yy_flush_buffer( b ); # 3761| # 3762|-> b->yy_input_file = file; # 3763| b->yy_fill_buffer = 1; # 3764| Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3763: warning[nullPointer]: Possible null pointer dereference: b # 3761| # 3762| b->yy_input_file = file; # 3763|-> b->yy_fill_buffer = 1; # 3764| # 3765| /* If b is the current buffer, then yy_init_buffer was _probably_ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/parser.tab.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/flask/utils/label-pci.c: scope_hint: In function ‘main’ xen-4.18.1-build/xen-4.18.1/tools/flask/utils/label-pci.c:78:15: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&buf, "r")’ # 76| } # 77| # 78|-> ret = xc_flask_add_device(xch, sbdf, argv[2]); # 79| if (ret) { # 80| fprintf(stderr, "xc_flask_add_device: Unable to set context of PCI device %s (0x%x) to %s: %d\n", Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/flask/utils/label-pci.c:78:15: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&buf, "r")’ # 76| } # 77| # 78|-> ret = xc_flask_add_device(xch, sbdf, argv[2]); # 79| if (ret) { # 80| fprintf(stderr, "xc_flask_add_device: Unable to set context of PCI device %s (0x%x) to %s: %d\n", Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/flask/utils/loadpolicy.c: scope_hint: In function ‘main’ xen-4.18.1-build/xen-4.18.1/tools/flask/utils/loadpolicy.c:81:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘polMemCp’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 79| } # 80| # 81|-> memcpy(polMemCp, polMem, info.st_size); # 82| #else # 83| ret = read(polFd, polMemCp, info.st_size); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/afl-harness.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/afl-harness.c: scope_hint: In function ‘main’ xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/afl-harness.c:94:16: warning[-Wanalyzer-null-argument]: use of NULL ‘fp’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/afl-harness.c:3: included_from: Included from here. /usr/include/stdio.h:728:15: note: argument 4 of ‘fread’ must be non-null # 92| #endif # 93| # 94|-> size = fread(input, 1, INPUT_SIZE, fp); # 95| # 96| if ( ferror(fp) ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/afl-harness.c:94:16: warning[core.NonNullParamChecker]: Null pointer passed to 4th parameter expecting 'nonnull' # 92| #endif # 93| # 94|-> size = fread(input, 1, INPUT_SIZE, fp); # 95| # 96| if ( ferror(fp) ) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/fuzz/x86_instruction_emulator/fuzz-emul.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/helpers/init-xenstore-domain.c: scope_hint: In function ‘build’ xen-4.18.1-build/xen-4.18.1/tools/helpers/init-xenstore-domain.c:106:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/xen/xenbus_backend", 2)’ # 104| } # 105| # 106|-> if ( flask ) # 107| { # 108| rv = xc_flask_context_to_sid(xch, flask, strlen(flask), &config.ssidref); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/include/xen-foreign/checker.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libacpi/build.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libacpi/mk_dsdt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/tools/libacpi/mk_dsdt.c:443: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 441| stmt("Name", "_ADR, %#06x0000", slot); # 442| push_block("Method", "_EJ0,1"); { # 443|-> stmt("Store", "%#010x, B0EJ", 1 << slot); # 444| } pop_block(); # 445| stmt("Name", "_SUN, %i", slot); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/ext2fs-lib/ext2fs-lib.c:128:7: warning[deadcode.DeadStores]: Although the value stored to 'err' is used in the enclosing expression, the value is never actually read from 'err' # 126| int err; # 127| # 128|-> if ((err = ext2fs_file_llseek(*f, 0, EXT2_SEEK_CUR, &tmpoff)) != 0) { # 129| errno = EINVAL; # 130| return (-1); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/ext2fs-lib/ext2fs-lib.c:133:7: warning[deadcode.DeadStores]: Although the value stored to 'err' is used in the enclosing expression, the value is never actually read from 'err' # 131| } # 132| # 133|-> if ((err = ext2fs_file_llseek(*f, off, EXT2_SEEK_SET, NULL)) != 0) { # 134| errno = EINVAL; # 135| return (-1); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/fat/fsys_fat.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/iso9660/fsys_iso9660.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/reiserfs/fsys_reiserfs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/ufs/fsys_ufs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/xfs/fsys_xfs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/xfs/fsys_xfs.c:351:14: warning[core.NullDereference]: Access to field 'namelen' results in a dereference of a null pointer (loaded from variable 'sfe') # 349| break; # 350| default: # 351|-> namelen = sfe->namelen; # 352| *ino = sf_ino ((char *)sfe, namelen); # 353| name = (char *)sfe->name; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/xfs/fsys_xfs.c:576:22: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value # 574| } # 575| # 576|-> ino = (linkbuf[0] == '/') ? xfs.rootino : parent_ino; # 577| while (n < (xfs.bsize - 1) && (linkbuf[n++] = *dirname++)); # 578| linkbuf[n] = 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/xfs/fsys_xfs.c:616:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value # 614| if (cmp == 0) { # 615| parent_ino = ino; # 616|-> if (new_ino) # 617| ino = new_ino; # 618| *(dirname = rest) = ch; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/zfs/fsys_zfs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/zfs/fsys_zfs.c:713:17: warning[core.BitwiseShift]: Right operand is negative in right shift # 711| blksz = mdn->dn_datablkszsec << SPA_MINBLOCKSHIFT; # 712| epbs = zfs_log2(blksz) - DNODE_SHIFT; # 713|-> blkid = objnum >> epbs; # 714| idx = objnum & ((1<<epbs)-1); # 715| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libfsimage/zfs/fsys_zfs.c:1226:2: warning[deadcode.DeadStores]: Value stored to 'stack' is never read # 1224| # 1225| vdev = (vdev_phys_t *)stack; # 1226|-> stack += sizeof (vdev_phys_t); # 1227| # 1228| if (nvlist_unpack(vdev->vp_nvlist, &nvlist)) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/ctrl/xc_domain.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/ctrl/xc_flask.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/ctrl/xc_misc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/ctrl/xc_pagetab.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/devicemodel/core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/foreignmemory/core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/gnttab/linux.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_core_x86.c:79: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 77| static inline bool is_canonical_address(uint64_t vaddr) # 78| { # 79|-> return ((int64_t)vaddr >> 47) == ((int64_t)vaddr >> 63); # 80| } # 81| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_cpuid_x86.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_cpuid_x86.c:287:11: warning[deadcode.DeadStores]: Although the value stored to 'rc' is used in the enclosing expression, the value is never actually read from 'rc' # 285| unsigned int nr_host, nr_def, nr_cur; # 286| # 287|-> if ( (rc = xc_domain_getinfo_single(xch, domid, &di)) < 0 ) # 288| { # 289| PERROR("Failed to obtain d%d info", domid); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_cpuid_x86.c:454:11: warning[deadcode.DeadStores]: Although the value stored to 'rc' is used in the enclosing expression, the value is never actually read from 'rc' # 452| unsigned int nr_host, nr_def, nr_cur; # 453| # 454|-> if ( (rc = xc_domain_getinfo_single(xch, domid, &di)) < 0 ) # 455| { # 456| PERROR("Failed to obtain d%d info", domid); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_cpuid_x86.c:593:11: warning[deadcode.DeadStores]: Although the value stored to 'rc' is used in the enclosing expression, the value is never actually read from 'rc' # 591| uint32_t len = ARRAY_SIZE(host_featureset); # 592| # 593|-> if ( (rc = xc_domain_getinfo_single(xch, domid, &di)) < 0 ) # 594| { # 595| PERROR("Failed to obtain d%d info", domid); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_binloader.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_bzimageloader.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_core.c:424:17: warning[deadcode.DeadStores]: Value stored to 'mode' during its initialization is never read # 422| xen_pfn_t offset; # 423| unsigned int page_shift = XC_DOM_PAGE_SHIFT(dom); # 424|-> const char *mode = "unset"; # 425| # 426| *count_out = 0; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_lz4.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_bzip2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_lzma.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_lzo1x.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_xz.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_zstd.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_x86.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_x86.c:1227:9: warning[deadcode.DeadStores]: Value stored to 'nr_vnodes' is never read # 1225| vmemranges[0].nid = 0; # 1226| # 1227|-> nr_vnodes = 1; # 1228| vnode_to_pnode = dummy_vnode_to_pnode; # 1229| vnode_to_pnode[0] = XC_NUMA_NO_NODE; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_x86.c:1234:9: warning[deadcode.DeadStores]: Value stored to 'nr_vnodes' is never read # 1232| { # 1233| nr_vmemranges = dom->nr_vmemranges; # 1234|-> nr_vnodes = dom->nr_vnodes; # 1235| vmemranges = dom->vmemranges; # 1236| vnode_to_pnode = dom->vnode_to_pnode; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_x86.c:1399:9: warning[deadcode.DeadStores]: Value stored to 'nr_vnodes' is never read # 1397| # 1398| dummy_vnode_to_pnode[0] = XC_NUMA_NO_NODE; # 1399|-> nr_vnodes = 1; # 1400| vmemranges = dummy_vmemrange; # 1401| vnode_to_pnode = dummy_vnode_to_pnode; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_x86.c:1412:9: warning[deadcode.DeadStores]: Value stored to 'nr_vnodes' is never read # 1410| # 1411| nr_vmemranges = dom->nr_vmemranges; # 1412|-> nr_vnodes = dom->nr_vnodes; # 1413| vmemranges = dom->vmemranges; # 1414| vnode_to_pnode = dom->vnode_to_pnode; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_domain.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_offline_page.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_resume.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_common.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_common.h:211: error[memleak]: Memory leak: ptr # 209| blob->size = size; # 210| # 211|-> return 0; # 212| } # 213| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_restore.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_restore.c:261:13: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value # 259| { # 260| rc = -1; # 261|-> ERROR("Mapping pfn %#"PRIpfn" (mfn %#"PRIpfn", type %#"PRIx32") failed with %d", # 262| pfns[i], mfns[j], types[i], map_errs[j]); # 263| goto err; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_restore_x86_pv.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_restore_x86_pv.c:1006: warning[uninitvar]: Uninitialized variable: pfns # 1004| } # 1005| # 1006|-> if ( to_populate && populate_pfns(ctx, to_populate, pfns, NULL) ) # 1007| return -1; # 1008| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:9: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 7| static inline bool is_canonical_address(xen_vaddr_t vaddr) # 8| { # 9|-> return ((int64_t)vaddr >> 47) == ((int64_t)vaddr >> 63); # 10| } # 11| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c: scope_hint: In function ‘map_p2m_leaves’ xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:106:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’ xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_common.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_common_x86.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_common_x86_pv.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:472:15: note: in expansion of macro ‘GET_FIELD’ xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_private.h:47:48: note: in definition of macro ‘GET_FIELD’ xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:1: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_private.h:30: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:369:5: note: in expansion of macro ‘DPRINTF’ # 104| for ( x = 0; x < n_mfns; ++x ) # 105| { # 106|-> if ( !mfn_in_pseudophysmap(ctx, mfns[x]) ) # 107| { # 108| ERROR("Bad mfn in p2m_frame_list[%u]", x); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:106:15: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 104| for ( x = 0; x < n_mfns; ++x ) # 105| { # 106|-> if ( !mfn_in_pseudophysmap(ctx, mfns[x]) ) # 107| { # 108| ERROR("Bad mfn in p2m_frame_list[%u]", x); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_sr_save_x86_pv.c:815:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 813| static int write_x86_pv_p2m_frames(struct xc_sr_context *ctx) # 814| { # 815|-> xc_interface *xch = ctx->xch; # 816| int rc; unsigned int i; # 817| size_t datasz = ctx->x86.pv.p2m_frames * sizeof(uint64_t); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/hypfs/core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/hypfs/core.c:149: error[memleakOnRealloc]: Common realloc mistake: 'content' nulled but not freed upon failure # 147| # 148| out_sz = z.next_out - workbuf; # 149|-> content = realloc(content, *sz + out_sz + 1); # 150| if (!content) { # 151| ret = Z_MEM_ERROR; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/hypfs/core.c:162:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'content' # 160| free(content); # 161| content = NULL; # 162|-> errno = EIO; # 163| } # 164| free(workbuf); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2108:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2106| void libxl_ioport_range_init(libxl_ioport_range *p) # 2107| { # 2108|-> memset(p, '\0', sizeof(*p)); # 2109| } # 2110| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2113:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2111| void libxl_iomem_range_init(libxl_iomem_range *p) # 2112| { # 2113|-> memset(p, '\0', sizeof(*p)); # 2114| p->gfn = LIBXL_INVALID_GFN; # 2115| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2187:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2185| void libxl_smbios_init(libxl_smbios *p) # 2186| { # 2187|-> memset(p, '\0', sizeof(*p)); # 2188| } # 2189| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2204:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2202| void libxl_sched_params_init(libxl_sched_params *p) # 2203| { # 2204|-> memset(p, '\0', sizeof(*p)); # 2205| p->vcpuid = LIBXL_SCHED_PARAM_VCPU_INDEX_DEFAULT; # 2206| p->weight = LIBXL_DOMAIN_SCHED_PARAM_WEIGHT_DEFAULT; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2232:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2230| void libxl_vnode_info_init(libxl_vnode_info *p) # 2231| { # 2232|-> memset(p, '\0', sizeof(*p)); # 2233| p->memkb = LIBXL_MEMKB_DEFAULT; # 2234| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2291:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2289| void libxl_device_vfb_init(libxl_device_vfb *p) # 2290| { # 2291|-> memset(p, '\0', sizeof(*p)); # 2292| p->devid = -1; # 2293| libxl_vnc_info_init(&p->vnc); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2299:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2297| void libxl_device_vkb_init(libxl_device_vkb *p) # 2298| { # 2299|-> memset(p, '\0', sizeof(*p)); # 2300| p->devid = -1; # 2301| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2305:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2303| void libxl_device_virtio_init(libxl_device_virtio *p) # 2304| { # 2305|-> memset(p, '\0', sizeof(*p)); # 2306| p->devid = -1; # 2307| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2311:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2309| void libxl_device_disk_init(libxl_device_disk *p) # 2310| { # 2311|-> memset(p, '\0', sizeof(*p)); # 2312| } # 2313| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2316:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2314| void libxl_device_nic_init(libxl_device_nic *p) # 2315| { # 2316|-> memset(p, '\0', sizeof(*p)); # 2317| p->devid = -1; # 2318| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2322:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2320| void libxl_device_pci_init(libxl_device_pci *p) # 2321| { # 2322|-> memset(p, '\0', sizeof(*p)); # 2323| p->rdm_policy = LIBXL_RDM_RESERVE_POLICY_INVALID; # 2324| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2328:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2326| void libxl_device_rdm_init(libxl_device_rdm *p) # 2327| { # 2328|-> memset(p, '\0', sizeof(*p)); # 2329| p->policy = LIBXL_RDM_RESERVE_POLICY_INVALID; # 2330| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2334:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2332| void libxl_device_usbctrl_init(libxl_device_usbctrl *p) # 2333| { # 2334|-> memset(p, '\0', sizeof(*p)); # 2335| p->devid = -1; # 2336| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2340:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2338| void libxl_device_usbdev_init(libxl_device_usbdev *p) # 2339| { # 2340|-> memset(p, '\0', sizeof(*p)); # 2341| p->ctrl = -1; # 2342| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2356:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2354| void libxl_device_dtdev_init(libxl_device_dtdev *p) # 2355| { # 2356|-> memset(p, '\0', sizeof(*p)); # 2357| } # 2358| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2361:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2359| void libxl_device_vtpm_init(libxl_device_vtpm *p) # 2360| { # 2361|-> memset(p, '\0', sizeof(*p)); # 2362| p->devid = -1; # 2363| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2367:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2365| void libxl_device_p9_init(libxl_device_p9 *p) # 2366| { # 2367|-> memset(p, '\0', sizeof(*p)); # 2368| p->devid = -1; # 2369| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2373:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2371| void libxl_device_pvcallsif_init(libxl_device_pvcallsif *p) # 2372| { # 2373|-> memset(p, '\0', sizeof(*p)); # 2374| p->devid = -1; # 2375| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2379:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2377| void libxl_device_channel_init(libxl_device_channel *p) # 2378| { # 2379|-> memset(p, '\0', sizeof(*p)); # 2380| p->devid = -1; # 2381| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2399:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2397| void libxl_connector_param_init(libxl_connector_param *p) # 2398| { # 2399|-> memset(p, '\0', sizeof(*p)); # 2400| } # 2401| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2404:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2402| void libxl_device_vdispl_init(libxl_device_vdispl *p) # 2403| { # 2404|-> memset(p, '\0', sizeof(*p)); # 2405| p->devid = -1; # 2406| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2415:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2413| void libxl_vsnd_stream_init(libxl_vsnd_stream *p) # 2414| { # 2415|-> memset(p, '\0', sizeof(*p)); # 2416| libxl_vsnd_params_init(&p->params); # 2417| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2421:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2419| void libxl_vsnd_pcm_init(libxl_vsnd_pcm *p) # 2420| { # 2421|-> memset(p, '\0', sizeof(*p)); # 2422| libxl_vsnd_params_init(&p->params); # 2423| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2427:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2425| void libxl_device_vsnd_init(libxl_device_vsnd *p) # 2426| { # 2427|-> memset(p, '\0', sizeof(*p)); # 2428| p->devid = -1; # 2429| libxl_vsnd_params_init(&p->params); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2480:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2478| void libxl_connectorinfo_init(libxl_connectorinfo *p) # 2479| { # 2480|-> memset(p, '\0', sizeof(*p)); # 2481| } # 2482| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2491:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2489| void libxl_streaminfo_init(libxl_streaminfo *p) # 2490| { # 2491|-> memset(p, '\0', sizeof(*p)); # 2492| } # 2493| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/_libxl_types.c:2496:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 2494| void libxl_pcminfo_init(libxl_pcminfo *p) # 2495| { # 2496|-> memset(p, '\0', sizeof(*p)); # 2497| } # 2498| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl.c:697:13: warning[deadcode.DeadStores]: Value stored to 'par' is never read # 695| path[end - par - 2 + 8] = 0; # 696| val = "no"; # 697|-> par += 2; # 698| } else { # 699| path = libxl__sprintf(gc, "/params/%s", par); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c:239:29: warning[unix.Malloc]: Use of memory after it is freed # 237| while (dc->used >= dc->maxsz) { # 238| libxl__datacopier_buf *rm = XEN_TAILQ_FIRST(&dc->bufs); # 239|-> dc->used -= rm->used; # 240| assert(dc->used >= 0); # 241| XEN_TAILQ_REMOVE(&dc->bufs, rm, entry); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c:295:43: warning[core.NullDereference]: Access to field 'used' results in a dereference of a null pointer (loaded from variable 'buf') # 293| } # 294| if (dc->log) { # 295|-> int wrote = fwrite(buf->buf + buf->used, 1, r, dc->log); # 296| if (wrote != r) { # 297| assert(ferror(dc->log)); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c: scope_hint: In function ‘datacopier_readable’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c:295:46: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘buf’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.h:26: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c:17: included_from: Included from here. # 293| } # 294| if (dc->log) { # 295|-> int wrote = fwrite(buf->buf + buf->used, 1, r, dc->log); # 296| if (wrote != r) { # 297| assert(ferror(dc->log)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_aoutils.c:337:14: warning[unix.Malloc]: Use of memory after it is freed # 335| if (!buf) # 336| break; # 337|-> if (!buf->used) { # 338| XEN_TAILQ_REMOVE(&dc->bufs, buf, entry); # 339| free(buf); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_bootloader.c:212:16: warning[core.uninitialized.ArraySubscript]: Array subscript is undefined # 210| # 211| const char *rhs = buf + prefixlen; # 212|-> if (!CTYPE(isspace,*rhs)) # 213| return 0; # 214| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_proxy.c: scope_hint: In function ‘colo_proxy_setup’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_proxy.c:298:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘h’ # 296| if (size) { # 297| h = (struct nlmsghdr *)buff; # 298|-> if (h->nlmsg_type == NLMSG_ERROR) { # 299| /* ack's type is NLMSG_ERROR */ # 300| struct nlmsgerr *err = (struct nlmsgerr *)NLMSG_DATA(h); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:53:33: warning[deadcode.DeadStores]: Value stored to 'dcs' during its initialization is never read # 51| static void colo_enable_logdirty(libxl__colo_restore_state *crs, libxl__egc *egc) # 52| { # 53|-> libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 54| libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 55| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:54:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 52| { # 53| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 54|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 55| # 56| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:82:33: warning[deadcode.DeadStores]: Value stored to 'dcs' during its initialization is never read # 80| libxl__egc *egc) # 81| { # 82|-> libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 83| libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 84| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:83:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 81| { # 82| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 83|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 84| # 85| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:116:10: warning[core.NullDereference]: Access to field 'saved_cb' results in a dereference of a null pointer (loaded from variable 'crs') # 114| EGC_GC; # 115| # 116|-> if (!crs->saved_cb) { # 117| /* TODO: sync mmu for hvm? */ # 118| if (restore_device_model) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:228:23: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 226| libxl__srm_restore_autogen_callbacks *const callbacks = # 227| &dcs->srs.shs.callbacks.restore.a; # 228|-> const int domid = crs->domid; # 229| # 230| STATE_AO_GC(crs->ao); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:350:33: warning[deadcode.DeadStores]: Value stored to 'dcs' during its initialization is never read # 348| libxl__colo_restore_state *crs = cds->concrete_data; # 349| libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 350|-> libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 351| # 352| EGC_GC; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:410:33: warning[deadcode.DeadStores]: Value stored to 'dcs' during its initialization is never read # 408| int rc) # 409| { # 410|-> libxl__domain_create_state *dcs = CONTAINER_OF(crcs->crs, *dcs, crs); # 411| # 412| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:418:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 416| # 417| if (rc) # 418|-> LOGD(ERROR, crs->domid, "cannot do failover"); # 419| # 420| libxl__colo_restore_teardown_done(egc, crs, rc); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:455:23: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 453| # 454| /* convenience aliases */ # 455|-> const int domid = crs->domid; # 456| const libxl_ctx *const ctx = libxl__gc_owner(gc); # 457| xc_interface *const xch = ctx->xch; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:587:19: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'cds') # 585| } # 586| # 587|-> cds->callback = colo_restore_preresume_cb; # 588| libxl__checkpoint_devices_preresume(egc, cds); # 589| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:597:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 595| libxl__colo_restore_state *crs = cds->concrete_data; # 596| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 597|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 598| # 599| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:649:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 647| # 648| if (rc) { # 649|-> LOGD(ERROR, crs->domid, "cannot resume secondary vm"); # 650| goto out; # 651| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:658:9: warning[core.NullDereference]: Access to field 'saved_cb' results in a dereference of a null pointer (loaded from variable 'crs') # 656| # 657| /* avoid calling stream->completion_callback() more than once */ # 658|-> if (crs->saved_cb) { # 659| dcs->callback = crs->saved_cb; # 660| crs->saved_cb = NULL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:715:39: warning[core.NullDereference]: Access to field 'crs' results in a dereference of a null pointer (loaded from variable 'crcs') # 713| { # 714| libxl__colo_restore_checkpoint_state *crcs = CONTAINER_OF(lds, *crcs, lds); # 715|-> libxl__domain_create_state *dcs = CONTAINER_OF(crcs->crs, *dcs, crs); # 716| # 717| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:724:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 722| # 723| if (rc) { # 724|-> LOGD(ERROR, crs->domid, "cannot enable logdirty"); # 725| goto out; # 726| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:742:39: warning[core.NullDereference]: Access to field 'crs' results in a dereference of a null pointer (loaded from variable 'crcs') # 740| { # 741| libxl__colo_restore_checkpoint_state *crcs = CONTAINER_OF(lds, *crcs, lds); # 742|-> libxl__domain_create_state *dcs = CONTAINER_OF(crcs->crs, *dcs, crs); # 743| # 744| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:750:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from field 'crs') # 748| # 749| if (rc) { # 750|-> LOGD(ERROR, crcs->crs->domid, "cannot enable logdirty"); # 751| goto out; # 752| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:770:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 768| { # 769| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 770|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 771| # 772| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:815:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 813| libxl__colo_restore_state *crs = cds->concrete_data; # 814| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 815|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 816| # 817| /* Convenience aliases */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:850:28: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from field 'crs') # 848| # 849| /* Convenience aliases */ # 850|-> const uint32_t domid = crcs->crs->domid; # 851| libxl__save_helper_state *const shs = &dcs->srs.shs; # 852| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:888:19: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'cds') # 886| libxl__checkpoint_devices_state *cds = &dcs->cds; # 887| # 888|-> cds->callback = colo_restore_commit_cb; # 889| libxl__checkpoint_devices_commit(shs->egc, cds); # 890| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:898:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 896| libxl__colo_restore_state *crs = cds->concrete_data; # 897| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 898|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 899| # 900| EGC_GC; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:927:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from field 'crs') # 925| # 926| if (id != CHECKPOINT_NEW) { # 927|-> LOGD(ERROR, crcs->crs->domid, "invalid section: %d", id); # 928| goto out; # 929| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:983:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 981| # 982| if (rc) { # 983|-> LOGD(ERROR, crs->domid, "cannot suspend secondary vm"); # 984| goto out; # 985| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:989:53: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'crs') # 987| crcs->status = LIBXL_COLO_SUSPENDED; # 988| # 989|-> if (libxl__qmp_query_xen_replication_status(gc, crs->domid)) { # 990| LOGD(ERROR, crs->domid, "replication error occurs when secondary vm is running"); # 991| goto out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:1009:50: warning[core.NullDereference]: Access to field 'crcs' results in a dereference of a null pointer (loaded from variable 'crs') # 1007| libxl__colo_restore_state *crs = cds->concrete_data; # 1008| libxl__domain_create_state *dcs = CONTAINER_OF(crs, *dcs, crs); # 1009|-> libxl__colo_restore_checkpoint_state *crcs = crs->crcs; # 1010| libxl_sr_checkpoint_state srcs = { .id = CHECKPOINT_SVM_SUSPENDED }; # 1011| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:1037:39: warning[core.NullDereference]: Access to field 'crs' results in a dereference of a null pointer (loaded from variable 'crcs') # 1035| libxl__colo_restore_checkpoint_state *crcs = # 1036| CONTAINER_OF(stream, *crcs, sws); # 1037|-> libxl__domain_create_state *dcs = CONTAINER_OF(crcs->crs, *dcs, crs); # 1038| int ok; # 1039| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_restore.c:1044:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from field 'crs') # 1042| if (rc < 0) { # 1043| /* TODO: it may be a internal error, but we don't know */ # 1044|-> LOGD(ERROR, crcs->crs->domid, "sending data fails"); # 1045| ok = 2; # 1046| goto out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_save.c:294:19: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'cds') # 292| libxl__checkpoint_devices_state *const cds = &dss->cds; # 293| # 294|-> cds->callback = colo_postsuspend_cb; # 295| libxl__checkpoint_devices_postsuspend(egc, cds); # 296| return; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_save.c:317:10: warning[core.NullDereference]: Access to field 'svm_running' results in a dereference of a null pointer (loaded from variable 'css') # 315| } # 316| # 317|-> if (!css->svm_running) { # 318| rc = 0; # 319| goto out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_save.c:350:10: warning[core.NullDereference]: Access to field 'paused' results in a dereference of a null pointer (loaded from variable 'css') # 348| } # 349| # 350|-> if (!css->paused && # 351| libxl__qmp_query_xen_replication_status(gc, dss->domid)) { # 352| LOGD(ERROR, dss->domid, Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_save.c:433:22: warning[core.NullDereference]: Access to field 'svm_running' results in a dereference of a null pointer (loaded from variable 'css') # 431| colo_proxy_preresume(&css->cps); # 432| # 433|-> css->svm_running = true; # 434| dss->cds.callback = colo_preresume_cb; # 435| libxl__checkpoint_devices_preresume(egc, &dss->cds); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_colo_save.c:457:9: warning[core.NullDereference]: Access to field 'qdisk_used' results in a dereference of a null pointer (loaded from variable 'css') # 455| } # 456| # 457|-> if (css->qdisk_used && !css->qdisk_setuped) { # 458| if (libxl__qmp_start_replication(gc, dss->domid, true)) { # 459| LOGD(ERROR, dss->domid, "starting replication fails"); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘cpuid_find_match’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:87:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘policy’ # 85| # 86| list = &policy->cpuid; # 87|-> if (*list != NULL) { # 88| for (i = 0; (*list)[i].input[0] != XEN_CPUID_INPUT_UNUSED; i++) { # 89| if ((*list)[i].input[0] == leaf && (*list)[i].input[1] == subleaf) Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘cpuid_add’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:137:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)(&flags[4])’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘cpuid_add’ # 135| if (!strcmp(flag->name, "family")) { # 136| if (num < 16) { # 137|-> memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4); # 138| memcpy(resstr + (32 - 8) - 20, "00000000", 8); # 139| } else { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:149:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘resstr’ # 147| } # 148| } else if (!strcmp(flag->name, "model")) { # 149|-> memcpy(resstr + (32 - 4) - 16, flags, 4); # 150| memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4); # 151| } else { Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:150:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)(&flags[4])’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘cpuid_add’ # 148| } else if (!strcmp(flag->name, "model")) { # 149| memcpy(resstr + (32 - 4) - 16, flags, 4); # 150|-> memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4); # 151| } else { # 152| memcpy(resstr + (32 - flag->length) - flag->bit, flags, Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:152:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘resstr’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 150| memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4); # 151| } else { # 152|-> memcpy(resstr + (32 - flag->length) - flag->bit, flags, # 153| flag->length); # 154| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘msr_find_match’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:168:15: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘policy’ # 166| policy = *pl = calloc(1, sizeof(*policy)); # 167| # 168|-> if (policy->msr != NULL) { # 169| for (i = 0; policy->msr[i].index != XC_MSR_INPUT_UNUSED; i++) { # 170| if (policy->msr[i].index == idx) { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:177:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 175| # 176| policy->msr = realloc(policy->msr, sizeof(struct xc_msr) * (i + 2)); # 177|-> policy->msr[i].index = idx; # 178| memset(policy->msr[i].policy, 'x', ARRAY_SIZE(policy->msr[0].policy) - 1); # 179| policy->msr[i].policy[ARRAY_SIZE(policy->msr[0].policy) - 1] = '\0'; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:439:5: warning[deadcode.DeadStores]: Value stored to 'str' is never read # 437| return 3; # 438| } # 439|-> str = endptr + 1; # 440| entry = cpuid_find_match(policy, leaf, subleaf); # 441| for (str = endptr + 1; *str != 0;) { Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl_cpuid_parse_config_xend’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:459:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘calloc(33, 1)’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_strncpy’ must be non-null # 457| } # 458| entry->policy[value] = calloc(32 + 1, 1); # 459|-> strncpy(entry->policy[value], str, 32); # 460| entry->policy[value][32] = 0; # 461| if (*endptr == 0) { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:669:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ # 667| # 668| array = libxl__json_object_get_array(co); # 669|-> if (!array->count) # 670| goto cpuid_empty; # 671| Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c:743:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_cpuid.c: scope_hint: In function ‘libxl__cpuid_policy_list_parse_json’ <built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null # 741| r = libxl__json_map_get("policy", t, JSON_STRING); # 742| if (!r) return ERROR_FAIL; # 743|-> if (strlen(libxl__json_object_get_string(r)) != # 744| ARRAY_SIZE(msr[i].policy) - 1) # 745| return ERROR_FAIL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_create.c:1378:5: warning[core.NullDereference]: Access to field 'ao' results in a dereference of a null pointer (loaded from variable 'bl') # 1376| { # 1377| libxl__domain_create_state *dcs = CONTAINER_OF(bl, *dcs, bl); # 1378|-> STATE_AO_GC(bl->ao); # 1379| domcreate_console_available(egc, dcs); # 1380| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_create.c:1994:41: warning[core.NullDereference]: Access to field 'what' results in a dereference of a null pointer (loaded from variable 'xswa') # 1992| if (rc) { # 1993| if (rc == ERROR_TIMEDOUT) # 1994|-> LOG(ERROR, "%s: timed out", xswa->what); # 1995| goto out; # 1996| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_device.c: scope_hint: In function ‘libxl__device_list’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_device.c:2110:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dir’ # 2108| # 2109| if (dt->from_xenstore) { # 2110|-> int nr = dt->get_num ? *num : atoi(*dir); # 2111| char *device_path = dt->get_num ? path : # 2112| GCSPRINTF("%s/%d", path, nr); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:871:9: warning[deadcode.DeadStores]: Value stored to 'nr_set_cpus' is never read # 869| } # 870| # 871|-> nr_set_cpus = libxl_bitmap_count_set(&b_info->avail_vcpus); # 872| s = libxl_bitmap_to_hex_string(CTX, &b_info->avail_vcpus); # 873| flexarray_vappend(dm_args, "-vcpu_avail", Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c: scope_hint: In function ‘libxl__pre_open_qmp_socket’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:1151:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘**dmss.build_state.dm_monitor_fd’ # 1149| if (fd < 0) { # 1150| LOGED(ERROR, domid, "socket() failed"); # 1151|-> return ERROR_FAIL; # 1152| } # 1153| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:3122:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'ev') # 3120| o = libxl__json_map_get("status", response, JSON_STRING); # 3121| if (!o) { # 3122|-> LOGD(ERROR, ev->domid, # 3123| "Missing 'status' in response to 'query-status'"); # 3124| LOGD(DEBUG, ev->domid, ".. instead, got: %s", JSON(response)); Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c: scope_hint: In function ‘device_model_qmp_cb’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:3133:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c: scope_hint: In function ‘device_model_qmp_cb’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.h:38: included_from: Included from here. /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 3131| else # 3132| expected_state = "paused"; # 3133|-> if (strcmp(status, expected_state)) { # 3134| LOGD(ERROR, ev->domid, "Unexpected QEMU status: %s", status); # 3135| rc = ERROR_NOT_READY; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:3143:5: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'ev') # 3141| # 3142| failed: # 3143|-> LOGD(ERROR, ev->domid, "QEMU did not start properly, rc=%d", rc); # 3144| libxl__spawn_initiate_failure(egc, &dmss->spawn, rc); # 3145| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c: scope_hint: In function ‘device_model_postconfig_vnc_passwd’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_dm.c:3356:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 3354| rc = libxl__xs_printf(gc, XBT_NULL, # 3355| GCSPRINTF("%s/console/vnc-pass", dompath), # 3356|-> "%s", vnc->passwd); # 3357| # 3358| out: Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:1216:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 1214| if (r < 0) { # 1215| LOGEVD(ERROR, r, domid, "xc_domain_pause failed"); # 1216|-> rc = ERROR_FAIL; # 1217| } # 1218| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:1907:27: warning[deadcode.DeadStores]: Value stored to 'svos' during its initialization is never read # 1905| { # 1906| EGC_GC; # 1907|-> set_vcpuonline_state *svos = CONTAINER_OF(qmp, *svos, qmp); # 1908| # 1909| if (rc == ERROR_QMP_COMMAND_NOT_FOUND) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:1911:23: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'qmp') # 1909| if (rc == ERROR_QMP_COMMAND_NOT_FOUND) { # 1910| /* Try again, we probably talking to a QEMU older than 2.12 */ # 1911|-> qmp->callback = set_vcpuonline_qmp_cpus_queried; # 1912| rc = libxl__ev_qmp_send(egc, qmp, "query-cpus", NULL); # 1913| if (rc) goto out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:1925:27: warning[deadcode.DeadStores]: Value stored to 'svos' during its initialization is never read # 1923| { # 1924| EGC_GC; # 1925|-> set_vcpuonline_state *svos = CONTAINER_OF(qmp, *svos, qmp); # 1926| # 1927| set_vcpuonline_qmp_query_cpus_parse(egc, qmp, response, false, rc); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:1979:21: warning[core.NullDereference]: Access to field 'index' results in a dereference of a null pointer (loaded from variable 'svos') # 1977| /* We are probably connected to a version of QEMU older than 2.7, # 1978| * let's fallback to using "cpu-add" command. */ # 1979|-> svos->index = -1; # 1980| set_vcpuonline_qmp_add_cpu(egc, qmp, NULL, 0); /* must be last */ # 1981| return; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:2003:17: warning[core.NullDereference]: Access to field 'index' results in a dereference of a null pointer (loaded from variable 'svos') # 2001| # 2002| out: # 2003|-> svos->index = -1; # 2004| set_vcpuonline_qmp_device_add_cpu(egc, qmp, NULL, rc); /* must be last */ # 2005| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:2386:40: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'qmp') # 2384| if (rc) goto out; # 2385| # 2386|-> rc = qmp_parse_query_cpus_fast(gc, qmp->domid, response, &rdcs->qemuu_cpus); # 2387| # 2388| out: Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_domain.c:2402:35: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'qmp') # 2400| if (rc) goto out; # 2401| # 2402|-> rc = qmp_parse_query_cpus(gc, qmp->domid, response, &rdcs->qemuu_cpus); # 2403| # 2404| out: Error: GCC_ANALYZER_WARNING (CWE-415): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_exec.c: scope_hint: In function ‘libxl__xenstore_child_wait_deprecated’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_exec.c:212:9: warning[-Wanalyzer-double-free]: double-‘free’ of ‘xs_read(xs_open(0), 0, path, & len)’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.h:26: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_exec.c:20: included_from: Included from here. /usr/include/sys/select.h:30: included_from: Included from here. /usr/include/sys/types.h:179: included_from: Included from here. /usr/include/uuid/uuid.h:38: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_osdeps.h:44: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_exec.c:18: included_from: Included from here. # 210| return rc; # 211| again: # 212|-> free(p); # 213| FD_ZERO(&rfds); # 214| FD_SET(xs_fileno(xsh), &rfds); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.c:157:5: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 155| s = libxl__zalloc(gc, ret + 1); # 156| va_copy(aq, ap); # 157|-> ret = vsnprintf(s, ret + 1, fmt, aq); # 158| va_end(aq); # 159| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_mem.c:404:27: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 402| # 403| if (out_target_memkb) # 404|-> *out_target_memkb = target_memkb; # 405| # 406| if (out_max_memkb) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_mem.c:454:12: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 452| # 453| rc = libxl_get_memory_target(ctx, domid, &my_out_target); # 454|-> return libxl__memkb_64to32(ctx, rc, my_out_target, out_target); # 455| } # 456| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_mem.c:551:12: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 549| # 550| rc = libxl_domain_need_memory_0x041200(ctx, b_info_in, &my_need_memkb); # 551|-> return libxl__memkb_64to32(ctx, rc, my_need_memkb, need_memkb); # 552| } # 553| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_netbuffer.c:45:30: warning[core.NullDereference]: Access to field 'concrete_data' results in a dereference of a null pointer (loaded from variable 'cds') # 43| int rc, ret; # 44| libxl__domain_save_state *dss = CONTAINER_OF(cds, *dss, cds); # 45|-> libxl__remus_state *rs = cds->concrete_data; # 46| # 47| STATE_AO_GC(cds->ao); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_pci.c:1174:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 1172| return; # 1173| default: # 1174|-> rc = ERROR_INVAL; # 1175| break; # 1176| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_pci.c:1266:39: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'qmp') # 1264| if (rc) { # 1265| /* Retry only applicable for HVM with stubdom. */ # 1266|-> if (libxl_get_stubdom_id(CTX, qmp->domid) == 0) # 1267| goto out; # 1268| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_pci.c:1282:19: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'qmp') # 1280| } # 1281| # 1282|-> qmp->callback = pci_add_qmp_query_pci_cb; # 1283| rc = libxl__ev_qmp_send(egc, qmp, "query-pci", NULL); # 1284| if (rc) goto out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_pci.c:1384:9: warning[core.NullDereference]: Access to field 'domid' results in a dereference of a null pointer (loaded from variable 'qmp') # 1382| out: # 1383| if (rc == ERROR_QEMU_API) { # 1384|-> LOGD(ERROR, qmp->domid, # 1385| "Unexpected response to QMP cmd 'query-pci', received:\n%s", # 1386| JSON(response)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_pci.c:1441:27: warning[deadcode.DeadStores]: Although the value stored to 'size' is used in the enclosing expression, the value is never actually read from 'size' # 1439| pci->bus, pci->dev, pci->func); # 1440| f = fopen(sysfs_path, "r"); # 1441|-> start = end = flags = size = 0; # 1442| irq = 0; # 1443| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_qmp.c:449:13: warning[deadcode.DeadStores]: Value stored to 'rd' is never read # 447| s = incomplete; # 448| s_end = s + rd; # 449|-> rd = 0; # 450| } # 451| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_qmp.c:689:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 687| # 688| qmp_socket = GCSPRINTF("%s/qmp-libxl-%d", libxl__run_dir_path(), domid); # 689|-> if ((ret = qmp_open(qmp, qmp_socket, QMP_SOCKET_CONNECT_TIMEOUT)) < 0) { # 690| LOGED(ERROR, domid, "Connection error"); # 691| qmp_free_handler(qmp); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_qmp.c:699:14: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 697| /* Wait for the response to qmp_capabilities */ # 698| while (!qmp->connected) { # 699|-> if ((ret = qmp_next(gc, qmp)) < 0) { # 700| break; # 701| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_qmp.c:1042:11: warning[core.NullDereference]: Access to field 'payload_fd' results in a dereference of a null pointer (loaded from variable 'ev') # 1040| libxl__domain_suspend_state *dsps = CONTAINER_OF(ev, *dsps, qmp); # 1041| # 1042|-> close(ev->payload_fd); # 1043| ev->payload_fd = -1; # 1044| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_remus.c:221:19: warning[core.NullDereference]: Access to field 'callback' results in a dereference of a null pointer (loaded from variable 'cds') # 219| # 220| libxl__checkpoint_devices_state *const cds = &dss->cds; # 221|-> cds->callback = remus_devices_postsuspend_cb; # 222| libxl__checkpoint_devices_postsuspend(egc, cds); # 223| return; Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_save_helper.c: scope_hint: In function ‘save_signal_handler’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_save_helper.c:159:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘r’ # 157| # 158| errno = esave; # 159|-> } # 160| # 161| static void setup_signals(void (*handler)(int)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_stream_read.c:329:5: warning[core.NullDereference]: Access to field 'ao' results in a dereference of a null pointer (loaded from variable 'dc') # 327| libxl__stream_read_state *stream = CONTAINER_OF(dc, *stream, dc); # 328| libxl__sr_hdr *hdr = &stream->hdr; # 329|-> STATE_AO_GC(dc->ao); # 330| # 331| if (rc) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_stream_read.c:678:5: warning[deadcode.DeadStores]: Value stored to 'emu_hdr' is never read # 676| goto err; # 677| } # 678|-> emu_hdr = rec->body; # 679| # 680| sprintf(path, LIBXL_DEVICE_MODEL_RESTORE_FILE".%u", dcs->guest_domid); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_stream_read.c:721:5: warning[core.NullDereference]: Access to field 'ao' results in a dereference of a null pointer (loaded from variable 'dc') # 719| { # 720| libxl__stream_read_state *stream = CONTAINER_OF(dc, *stream, emu_dc); # 721|-> STATE_AO_GC(dc->ao); # 722| # 723| libxl__carefd_close(stream->emu_carefd); Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.h:45: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c: scope_hint: In function ‘libxl_read_file_contents’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:345:22: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(filename, "r")’ # 343| } # 344| # 345|-> if (!S_ISREG(stab.st_mode)) { # 346| LOGE(ERROR, "%s is not a plain file", filename); # 347| errno = ENOTTY; Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:345:22: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(filename, "r")’ # 343| } # 344| # 345|-> if (!S_ISREG(stab.st_mode)) { # 346| LOGE(ERROR, "%s is not a plain file", filename); # 347| errno = ENOTTY; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c: scope_hint: In function ‘libxl__sendmsg_fds’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:1080:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ /usr/include/sys/socket.h:33: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_internal.h:49: included_from: Included from here. # 1078| /* attach open fd */ # 1079| cmsg = CMSG_FIRSTHDR(&msg); # 1080|-> cmsg->cmsg_level = SOL_SOCKET; # 1081| cmsg->cmsg_type = SCM_RIGHTS; # 1082| cmsg->cmsg_len = CMSG_LEN(spaceneeded); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c: scope_hint: In function ‘libxl__recvmsg_fds’ xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:1141:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 1139| } # 1140| cmsg = CMSG_FIRSTHDR(&msg); # 1141|-> if (cmsg->cmsg_len <= CMSG_LEN(0)) { # 1142| LOG(ERROR,"recvmsg got no control msg" # 1143| " when expecting fds (%s)", what); Error: GCC_ANALYZER_WARNING (CWE-1341): xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_utils.c:1167:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘fd’ # 1165| i++, i+=sizeof(fd)) { # 1166| memcpy(&fd, p, sizeof(fd)); # 1167|-> close(fd); # 1168| } # 1169| return ERROR_FAIL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_vkb.c:292:5: warning[deadcode.DeadStores]: Value stored to 'dompath' is never read # 290| # 291| libxl_vkbinfo_init(info); # 292|-> dompath = libxl__xs_get_dompath(gc, domid); # 293| info->devid = vkb->devid; # 294| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/libxl_vsnd.c:600:5: warning[deadcode.DeadStores]: Value stored to 'dompath' is never read # 598| # 599| libxl_vsndinfo_init(info); # 600|-> dompath = libxl__xs_get_dompath(gc, domid); # 601| info->devid = vsnd->devid; # 602| Error: CPPCHECK_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/light/test_common.c:41: error[memleakOnRealloc]: Common realloc mistake: 'poll_fds' nulled but not freed upon failure # 39| # 40| assert(poll_nfds > poll_nfds_allocd); # 41|-> poll_fds = realloc(poll_fds, poll_nfds * sizeof(poll_fds[0])); # 42| assert(poll_fds); # 43| poll_nfds_allocd = poll_nfds; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/light/testidl.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c: scope_hint: In function ‘getBridge’ xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:77:22: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘opendir("/sys/class/net")’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:25: included_from: Included from here. /usr/include/dirent.h:164:23: note: argument 1 of ‘readdir’ must be non-null # 75| # 76| d = opendir("/sys/class/net"); # 77|-> while ((de = readdir(d)) != NULL) { # 78| if ((strlen(de->d_name) > 0) && (de->d_name[0] != '.') # 79| && (strstr(de->d_name, excludeName) == NULL)) { Error: CPPCHECK_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:168: error[memleakOnRealloc]: Common realloc mistake: 'tmp' nulled but not freed upon failure # 166| /* Col variable contains current id of non-empty match */ # 167| col++; # 168|-> tmp = (char *)realloc(tmp, (matches[i].rm_eo - # 169| matches[i].rm_so + 1) * sizeof(char)); # 170| for (x = matches[i].rm_so; x < matches[i].rm_eo; x++) Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c: scope_hint: In function ‘parseNetDevLine’ xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:230:54: warning[-Wanalyzer-null-argument]: use of NULL ‘tmp’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c: scope_hint: In function ‘parseNetDevLine’ xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:30: included_from: Included from here. /usr/include/string.h:323:14: note: argument 1 of ‘strpbrk’ must be non-null # 228| } # 229| else if (iface != NULL) { # 230|-> char *tmp2 = strpbrk(tmp, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"); # 231| if (tmp2 != NULL) # 232| strcpy(iface, tmp2); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:469:7: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 467| # 468| if ((read_attributes_vbd(dp->d_name, "statistics/oo_req", buf, 256)<=0) || # 469|-> ((ret = sscanf(buf, "%llu", &vbd.oo_reqs)) != 1) || # 470| (read_attributes_vbd(dp->d_name, "statistics/rd_req", buf, 256)<=0) || # 471| ((ret = sscanf(buf, "%llu", &vbd.rd_reqs)) != 1) || Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:471:7: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 469| ((ret = sscanf(buf, "%llu", &vbd.oo_reqs)) != 1) || # 470| (read_attributes_vbd(dp->d_name, "statistics/rd_req", buf, 256)<=0) || # 471|-> ((ret = sscanf(buf, "%llu", &vbd.rd_reqs)) != 1) || # 472| (read_attributes_vbd(dp->d_name, "statistics/wr_req", buf, 256)<=0) || # 473| ((ret = sscanf(buf, "%llu", &vbd.wr_reqs)) != 1) || Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:473:7: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 471| ((ret = sscanf(buf, "%llu", &vbd.rd_reqs)) != 1) || # 472| (read_attributes_vbd(dp->d_name, "statistics/wr_req", buf, 256)<=0) || # 473|-> ((ret = sscanf(buf, "%llu", &vbd.wr_reqs)) != 1) || # 474| (read_attributes_vbd(dp->d_name, "statistics/rd_sect", buf, 256)<=0) || # 475| ((ret = sscanf(buf, "%llu", &vbd.rd_sects)) != 1) || Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:475:7: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 473| ((ret = sscanf(buf, "%llu", &vbd.wr_reqs)) != 1) || # 474| (read_attributes_vbd(dp->d_name, "statistics/rd_sect", buf, 256)<=0) || # 475|-> ((ret = sscanf(buf, "%llu", &vbd.rd_sects)) != 1) || # 476| (read_attributes_vbd(dp->d_name, "statistics/wr_sect", buf, 256)<=0) || # 477| ((ret = sscanf(buf, "%llu", &vbd.wr_sects)) != 1)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_linux.c:477:7: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 475| ((ret = sscanf(buf, "%llu", &vbd.rd_sects)) != 1) || # 476| (read_attributes_vbd(dp->d_name, "statistics/wr_sect", buf, 256)<=0) || # 477|-> ((ret = sscanf(buf, "%llu", &vbd.wr_sects)) != 1)) # 478| { # 479| vbd.error = 1; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c:107:14: warning[core.NullDereference]: Access to field 'len' results in a dereference of a null pointer # 105| goto done; # 106| # 107|-> for (i=0; i<YAJL_GET_ARRAY(ret_obj)->len; i++) { # 108| n = YAJL_GET_ARRAY(ret_obj)->values[i]; # 109| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c:220:14: warning[core.NullDereference]: Access to field 'len' results in a dereference of a null pointer # 218| # 219| /* Array of devices */ # 220|-> for (i=0; i<YAJL_GET_ARRAY(ret_obj)->len; i++) { # 221| memset(&vbd, 0, sizeof(xenstat_vbd)); # 222| qmp_devname = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c: scope_hint: In function ‘qmp_parse_stats’ xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c:220:44: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c:38: included_from: Included from here. # 218| # 219| /* Array of devices */ # 220|-> for (i=0; i<YAJL_GET_ARRAY(ret_obj)->len; i++) { # 221| memset(&vbd, 0, sizeof(xenstat_vbd)); # 222| qmp_devname = NULL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/stat/xenstat_qmp.c:298:10: warning[deadcode.DeadStores]: Although the value stored to 'n' is used in the enclosing expression, the value is never actually read from 'n' # 296| pfd[0].fd = qfd; # 297| pfd[0].events = POLLIN; # 298|-> while ((n = poll(pfd, 1, 10)) > 0) { # 299| if (pfd[0].revents & POLLIN) { # 300| if ((n = read(qfd, buf, sizeof(buf))) <= 0) { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c: scope_hint: In function ‘get_handle’ xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:254:13: warning[-Wanalyzer-null-argument]: use of NULL ‘connect_to’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c: scope_hint: In function ‘get_handle’ xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:37: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/include/xen-tools/xenstore-common.h: scope_hint: In function ‘get_handle’ xen-4.18.1-build/xen-4.18.1/tools/include/xen-tools/xenstore-common.h: scope_hint: In function ‘get_handle’ /usr/include/bits/types/stack_t.h:23: included_from: Included from here. /usr/include/signal.h:313: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:33: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c: scope_hint: In function ‘get_handle’ xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:22: included_from: Included from here. /usr/include/sys/stat.h:205:12: note: argument 1 of ‘stat’ must be non-null # 252| xentoolcore__register_active_handle(&h->tc_ah); # 253| # 254|-> if (stat(connect_to, &buf) != 0) # 255| goto err; # 256| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:668:8: warning[unix.Malloc]: Potential leak of memory pointed to by 'strings' # 666| /* If XS_DIRECTORY_PART isn't supported return E2BIG. */ # 667| if (!result) { # 668|-> if (errno == ENOSYS) # 669| errno = E2BIG; # 670| return NULL; Error: CPPCHECK_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/store/xs.c:685: error[memleakOnRealloc]: Common realloc mistake: 'strings' nulled but not freed upon failure # 683| # 684| result_len -= strlen(result) + 1; # 685|-> strings = realloc(strings, off + result_len); # 686| memcpy(strings + off, result + strlen(result) + 1, result_len); # 687| free(result); Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/libs/toolcore/handlereg.c: scope_hint: In function ‘xentoolcore__restrict_by_dup2_null’ xen-4.18.1-build/xen-4.18.1/tools/libs/toolcore/handlereg.c:87:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘r’ # 85| if (r < 0) goto err; # 86| # 87|-> close(nullfd); # 88| return 0; # 89| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/toollog/xtl_logger_stdio.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg.c:288:5: warning[deadcode.DeadStores]: Value stored to 'e' is never read # 286| } # 287| errno= 0; l= strtol(set->value->u.string, &ep, 0); # 288|-> e= errno; # 289| if (errno) { # 290| e= errno; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1721:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1707:21: note: in expansion of macro ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1711:31: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_create_buffer’ # 1719| */ # 1720| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 1721|-> if ( ! b->yy_ch_buf ) # 1722| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); # 1723| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1721:12: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__cfg_yyalloc(64, yyscanner)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1707:21: note: in expansion of macro ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1711:31: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:2344:7: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1711:31: note: in expansion of macro ‘yyalloc’ # 1719| */ # 1720| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 1721|-> if ( ! b->yy_ch_buf ) # 1722| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); # 1723| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1763:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1454:40: note: in expansion of macro ‘YY_MORE_ADJ’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1457:25: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1457:25: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1642:10: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1652:9: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1652:9: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1652:9: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1755:17: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1761:9: note: in expansion of macro ‘yy_flush_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1784:10: note: in expansion of macro ‘yy_flush_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1761:9: note: in expansion of macro ‘yy_flush_buffer’ # 1761| yy_flush_buffer( b , yyscanner); # 1762| # 1763|-> b->yy_input_file = file; # 1764| b->yy_fill_buffer = 1; # 1765| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1981:32: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1965:17: note: in expansion of macro ‘yy_scan_bytes’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1974:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1983:13: note: in expansion of macro ‘yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1915:17: note: in expansion of macro ‘yy_scan_buffer’ # 1979| buf[i] = yybytes[i]; # 1980| # 1981|-> buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 1982| # 1983| b = yy_scan_buffer( buf, n , yyscanner); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c: scope_hint: In function ‘xlu__cfg_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1981:32: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__cfg_yyalloc(n, yyscanner)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1965:17: note: in expansion of macro ‘yy_scan_bytes’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1974:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:2344:7: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1974:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1983:13: note: in expansion of macro ‘yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_l.c:1915:17: note: in expansion of macro ‘yy_scan_buffer’ # 1979| buf[i] = yybytes[i]; # 1980| # 1981|-> buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 1982| # 1983| b = yy_scan_buffer( buf, n , yyscanner); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c: scope_hint: In function ‘xlu__cfg_yyparse’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:383:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:368:9: note: in expansion of macro ‘YYCOPY’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:1275:9: note: in expansion of macro ‘YYSTACK_RELOCATE’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:383:25: note: in definition of macro ‘YYCOPY’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:1275:9: note: in expansion of macro ‘YYSTACK_RELOCATE’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:368:9: note: in expansion of macro ‘YYCOPY’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:1275:9: note: in expansion of macro ‘YYSTACK_RELOCATE’ # 381| # if defined __GNUC__ && 1 < __GNUC__ # 382| # define YYCOPY(Dst, Src, Count) \ # 383|-> __builtin_memcpy (Dst, Src, (Count) * sizeof (*(Src))) # 384| # else # 385| # define YYCOPY(Dst, Src, Count) \ Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_cfg_y.c:1394:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.string’ # 1392| unconditionally makes the parser a bit smaller, and it avoids a # 1393| GCC warning that YYVAL may be used uninitialized. */ # 1394|-> yyval = yyvsp[1-yylen]; # 1395| # 1396| /* Default location. */ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2336:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2322:21: note: in expansion of macro ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2326:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_create_buffer’ # 2334| * we need to put in 2 end-of-buffer characters. # 2335| */ # 2336|-> b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 2337| if ( ! b->yy_ch_buf ) # 2338| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2336:12: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__disk_yyalloc(64, yyscanner)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2322:21: note: in expansion of macro ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2326:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2943:7: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2326:24: note: in expansion of macro ‘yyalloc’ # 2334| * we need to put in 2 end-of-buffer characters. # 2335| */ # 2336|-> b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 2337| if ( ! b->yy_ch_buf ) # 2338| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2378:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2081:40: note: in expansion of macro ‘YY_MORE_ADJ’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2084:25: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2084:25: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2257:10: note: in expansion of macro ‘yyrestart’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2267:2: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2267:2: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2267:2: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2370:17: note: in expansion of macro ‘yy_init_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2376:2: note: in expansion of macro ‘yy_flush_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2399:10: note: in expansion of macro ‘yy_flush_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2376:2: note: in expansion of macro ‘yy_flush_buffer’ # 2376| # 2377| yy_flush_buffer( b , yyscanner); # 2378|-> # 2379| b->yy_input_file = file; # 2380| b->yy_fill_buffer = 1; Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2596:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2580:17: note: in expansion of macro ‘yy_scan_bytes’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2589:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2598:6: note: in expansion of macro ‘yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2530:17: note: in expansion of macro ‘yy_scan_buffer’ # 2594| for ( i = 0; i < _yybytes_len; ++i ) # 2595| buf[i] = yybytes[i]; # 2596|-> # 2597| buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 2598| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c: scope_hint: In function ‘xlu__disk_yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2596:25: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__disk_yyalloc(n, yyscanner)’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2580:17: note: in expansion of macro ‘yy_scan_bytes’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2589:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2943:7: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2589:24: note: in expansion of macro ‘yyalloc’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2598:6: note: in expansion of macro ‘yy_scan_buffer’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_disk_l.c:2530:17: note: in expansion of macro ‘yy_scan_buffer’ # 2594| for ( i = 0; i < _yybytes_len; ++i ) # 2595| buf[i] = yybytes[i]; # 2596|-> # 2597| buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 2598| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c: scope_hint: In function ‘xlu_pci_parse_spec_string’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:211:1: warning[-Wanalyzer-malloc-leak]: leak of ‘key’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ # 209| # 210| return 0; # 211|-> } # 212| # 213| int xlu_rdm_parse(XLU_Config *cfg, libxl_rdm_reserve *rdm, const char *str) Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:211:1: warning[-Wanalyzer-malloc-leak]: leak of ‘val’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ xen-4.18.1-build/xen-4.18.1/tools/libs/util/libxlu_pci.c:196:13: note: in expansion of macro ‘XLU__PCI_ERR’ # 209| # 210| return 0; # 211|-> } # 212| # 213| int xlu_rdm_parse(XLU_Config *cfg, libxl_rdm_reserve *rdm, const char *str) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/vchan/init.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c: scope_hint: In function ‘xenaccess_init’ xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:209:26: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xenaccess’ xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:201:5: note: in expansion of macro ‘DPRINTF’ # 207| # 208| /* Open connection to xen */ # 209|-> xenaccess->xc_handle = xch; # 210| # 211| /* Set domain id */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:673:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 671| # 672| if ( breakpoint ) # 673|-> rc = xc_monitor_software_breakpoint(xch, domain_id, 0); # 674| if ( debug ) # 675| rc = xc_monitor_debug_exceptions(xch, domain_id, 0, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:675:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 673| rc = xc_monitor_software_breakpoint(xch, domain_id, 0); # 674| if ( debug ) # 675|-> rc = xc_monitor_debug_exceptions(xch, domain_id, 0, 0); # 676| if ( cpuid ) # 677| rc = xc_monitor_cpuid(xch, domain_id, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:677:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 675| rc = xc_monitor_debug_exceptions(xch, domain_id, 0, 0); # 676| if ( cpuid ) # 677|-> rc = xc_monitor_cpuid(xch, domain_id, 0); # 678| if ( desc_access ) # 679| rc = xc_monitor_descriptor_access(xch, domain_id, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:679:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 677| rc = xc_monitor_cpuid(xch, domain_id, 0); # 678| if ( desc_access ) # 679|-> rc = xc_monitor_descriptor_access(xch, domain_id, 0); # 680| if ( write_ctrlreg_cr4 ) # 681| rc = xc_monitor_write_ctrlreg(xch, domain_id, VM_EVENT_X86_CR4, 0, 0, 0, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:681:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 679| rc = xc_monitor_descriptor_access(xch, domain_id, 0); # 680| if ( write_ctrlreg_cr4 ) # 681|-> rc = xc_monitor_write_ctrlreg(xch, domain_id, VM_EVENT_X86_CR4, 0, 0, 0, 0); # 682| # 683| if ( privcall ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:684:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 682| # 683| if ( privcall ) # 684|-> rc = xc_monitor_privileged_call(xch, domain_id, 0); # 685| # 686| if ( altp2m ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:688:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 686| if ( altp2m ) # 687| { # 688|-> rc = xc_altp2m_switch_to_view( xch, domain_id, 0 ); # 689| rc = xc_altp2m_destroy_view(xch, domain_id, altp2m_view_id); # 690| rc = xc_altp2m_set_domain_state(xch, domain_id, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:689:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 687| { # 688| rc = xc_altp2m_switch_to_view( xch, domain_id, 0 ); # 689|-> rc = xc_altp2m_destroy_view(xch, domain_id, altp2m_view_id); # 690| rc = xc_altp2m_set_domain_state(xch, domain_id, 0); # 691| rc = xc_monitor_singlestep(xch, domain_id, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:690:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 688| rc = xc_altp2m_switch_to_view( xch, domain_id, 0 ); # 689| rc = xc_altp2m_destroy_view(xch, domain_id, altp2m_view_id); # 690|-> rc = xc_altp2m_set_domain_state(xch, domain_id, 0); # 691| rc = xc_monitor_singlestep(xch, domain_id, 0); # 692| } else { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:691:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 689| rc = xc_altp2m_destroy_view(xch, domain_id, altp2m_view_id); # 690| rc = xc_altp2m_set_domain_state(xch, domain_id, 0); # 691|-> rc = xc_monitor_singlestep(xch, domain_id, 0); # 692| } else { # 693| rc = xc_set_mem_access(xch, domain_id, XENMEM_access_rwx, ~0ull, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:693:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 691| rc = xc_monitor_singlestep(xch, domain_id, 0); # 692| } else { # 693|-> rc = xc_set_mem_access(xch, domain_id, XENMEM_access_rwx, ~0ull, 0); # 694| rc = xc_set_mem_access(xch, domain_id, XENMEM_access_rwx, START_PFN, # 695| (xenaccess->max_gpfn - START_PFN) ); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-access.c:694:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 692| } else { # 693| rc = xc_set_mem_access(xch, domain_id, XENMEM_access_rwx, ~0ull, 0); # 694|-> rc = xc_set_mem_access(xch, domain_id, XENMEM_access_rwx, START_PFN, # 695| (xenaccess->max_gpfn - START_PFN) ); # 696| } Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-cpuid.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-hvmcrash.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-hvmctx.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-livepatch.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-mceinj.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-mceinj.c:235:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 233| if ( !cpumap ) # 234| err(xc_handle, "Failed to allocate cpumap\n"); # 235|-> memset(cpumap, 0, cpumap_size); # 236| line = cpu / 8; # 237| shift = cpu % 8; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-memshare.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-mfndump.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-ucode.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xen-vmtrace.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c: scope_hint: In function ‘cov_read’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:83:1: warning[-Wanalyzer-file-leak]: leak of FILE ‘f’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:25: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:322:17: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:330:5: note: in expansion of macro ‘set_xen_guest_handle_impl’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:39:5: note: in expansion of macro ‘set_xen_guest_handle’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:59:9: note: in expansion of macro ‘xc_hypercall_buffer_alloc’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:343:88: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:59:9: note: in expansion of macro ‘xc_hypercall_buffer_alloc’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:345:79: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:82:5: note: in expansion of macro ‘xc_hypercall_buffer_free’ # 81| # 82| xc_hypercall_buffer_free(xch, p); # 83|-> } # 84| # 85| static void cov_reset(void) Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:83:1: warning[-Wanalyzer-malloc-leak]: leak of ‘f’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:322:17: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:330:5: note: in expansion of macro ‘set_xen_guest_handle_impl’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:39:5: note: in expansion of macro ‘set_xen_guest_handle’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:59:9: note: in expansion of macro ‘xc_hypercall_buffer_alloc’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:343:88: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:59:9: note: in expansion of macro ‘xc_hypercall_buffer_alloc’ xen-4.18.1-build/xen-4.18.1/tools/include/xenctrl.h:345:79: note: in expansion of macro ‘HYPERCALL_BUFFER’ xen-4.18.1-build/xen-4.18.1/tools/misc/xencov.c:82:5: note: in expansion of macro ‘xc_hypercall_buffer_free’ # 81| # 82| xc_hypercall_buffer_free(xch, p); # 83|-> } # 84| # 85| static void cov_reset(void) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenhypfs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenlockprof.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenperf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: scope_hint: In function ‘print_cxstat’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:150:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.cc’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:26: included_from: Included from here. # 148| for ( i = 0; i < cxstat->nr; i++ ) # 149| { # 150|-> printf("C%-20d: transition [%20"PRIu64"]\n", # 151| i, cxstat->triggers[i]); # 152| printf(" residency [%20"PRIu64" ms]\n", Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:156:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.cc’ # 154| } # 155| for ( i = 0; i < MAX_PKG_RESIDENCIES && i < cxstat->nr_pc; ++i ) # 156|-> if ( cxstat->pc[i] ) # 157| printf("pc%d : [%20"PRIu64" ms]\n", i + 1, # 158| cxstat->pc[i] / 1000000UL); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:160:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.cc’ # 158| cxstat->pc[i] / 1000000UL); # 159| for ( i = 0; i < MAX_CORE_RESIDENCIES && i < cxstat->nr_cc; ++i ) # 160|-> if ( cxstat->cc[i] ) # 161| printf("cc%d : [%20"PRIu64" ms]\n", i + 1, # 162| cxstat->cc[i] / 1000000UL); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: scope_hint: In function ‘get_cxstat_by_cpuid’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:187:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.cc’ # 185| cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc)); # 186| if ( !cxstat->triggers || !cxstat->residencies || # 187|-> !cxstat->pc || !cxstat->cc ) # 188| { # 189| free(cxstat->cc); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:187:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.pc’ # 185| cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc)); # 186| if ( !cxstat->triggers || !cxstat->residencies || # 187|-> !cxstat->pc || !cxstat->cc ) # 188| { # 189| free(cxstat->cc); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:187:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.residencies’ # 185| cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc)); # 186| if ( !cxstat->triggers || !cxstat->residencies || # 187|-> !cxstat->pc || !cxstat->cc ) # 188| { # 189| free(cxstat->cc); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:187:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.triggers’ # 185| cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc)); # 186| if ( !cxstat->triggers || !cxstat->residencies || # 187|-> !cxstat->pc || !cxstat->cc ) # 188| { # 189| free(cxstat->cc); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:189:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 187| !cxstat->pc || !cxstat->cc ) # 188| { # 189|-> free(cxstat->cc); # 190| free(cxstat->pc); # 191| free(cxstat->residencies); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:190:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 188| { # 189| free(cxstat->cc); # 190|-> free(cxstat->pc); # 191| free(cxstat->residencies); # 192| free(cxstat->triggers); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:191:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 189| free(cxstat->cc); # 190| free(cxstat->pc); # 191|-> free(cxstat->residencies); # 192| free(cxstat->triggers); # 193| return -ENOMEM; Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:192:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 190| free(cxstat->pc); # 191| free(cxstat->residencies); # 192|-> free(cxstat->triggers); # 193| return -ENOMEM; # 194| } Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:204:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 202| { # 203| ret = -errno; # 204|-> free(cxstat->triggers); # 205| free(cxstat->residencies); # 206| free(cxstat->pc); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:205:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 203| ret = -errno; # 204| free(cxstat->triggers); # 205|-> free(cxstat->residencies); # 206| free(cxstat->pc); # 207| free(cxstat->cc); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:206:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 204| free(cxstat->triggers); # 205| free(cxstat->residencies); # 206|-> free(cxstat->pc); # 207| free(cxstat->cc); # 208| cxstat->triggers = NULL; Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:207:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 205| free(cxstat->residencies); # 206| free(cxstat->pc); # 207|-> free(cxstat->cc); # 208| cxstat->triggers = NULL; # 209| cxstat->residencies = NULL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:290:5: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 288| # 289| printf("cpu id : %d\n", cpuid); # 290|-> printf("total P-states : %d\n", pxstat->total); # 291| printf("usable P-states : %d\n", pxstat->usable); # 292| printf("current frequency : %"PRIu64" MHz\n", Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:293:12: warning[core.NullDereference]: Dereference of null pointer # 291| printf("usable P-states : %d\n", pxstat->usable); # 292| printf("current frequency : %"PRIu64" MHz\n", # 293|-> pxstat->pt[pxstat->cur].freq); # 294| for ( i = 0; i < pxstat->total; i++ ) # 295| { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: scope_hint: In function ‘print_pxstat’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:300:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pxstatinfo.pt’ # 298| else # 299| printf("P%-10d", i); # 300|-> printf("[%4"PRIu64" MHz]", pxstat->pt[i].freq); # 301| printf(": transition [%20"PRIu64"]\n", # 302| pxstat->pt[i].count); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: scope_hint: In function ‘get_pxstat_by_cpuid’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:322:24: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘malloc’ from within signal handler # 320| return -EINVAL; # 321| # 322|-> pxstat->trans_pt = malloc(max_px_num * max_px_num * # 323| sizeof(uint64_t)); # 324| if ( !pxstat->trans_pt ) Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:326:18: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘malloc’ from within signal handler # 324| if ( !pxstat->trans_pt ) # 325| return -ENOMEM; # 326|-> pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val)); # 327| if ( !pxstat->pt ) # 328| { Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:327:8: warning[-Wanalyzer-malloc-leak]: leak of ‘*pxstat.pt’ # 325| return -ENOMEM; # 326| pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val)); # 327|-> if ( !pxstat->pt ) # 328| { # 329| free(pxstat->trans_pt); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:327:8: warning[-Wanalyzer-malloc-leak]: leak of ‘*pxstat.trans_pt’ # 325| return -ENOMEM; # 326| pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val)); # 327|-> if ( !pxstat->pt ) # 328| { # 329| free(pxstat->trans_pt); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:329:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 327| if ( !pxstat->pt ) # 328| { # 329|-> free(pxstat->trans_pt); # 330| return -ENOMEM; # 331| } Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:337:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 335| { # 336| ret = -errno; # 337|-> free(pxstat->trans_pt); # 338| free(pxstat->pt); # 339| pxstat->trans_pt = NULL; Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:338:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 336| ret = -errno; # 337| free(pxstat->trans_pt); # 338|-> free(pxstat->pt); # 339| pxstat->trans_pt = NULL; # 340| pxstat->pt = NULL; Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c: scope_hint: In function ‘signal_int_handler’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:443:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘fprintf’ from within signal handler # 441| if ( xc_cputopoinfo(xc_handle, &max_cpus, NULL) != 0 ) # 442| { # 443|-> fprintf(stderr, "failed to discover number of CPUs: %s\n", # 444| strerror(errno)); # 445| goto out; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:469:70: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 467| for ( j = 0; j < cxstat_end[i].nr; j++ ) # 468| { # 469|-> int64_t diff = (int64_t)cxstat_end[i].residencies[j] - # 470| (int64_t)cxstat_start[i].residencies[j]; # 471| if ( diff >=0 ) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:482:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 480| if ( !get_pxstat_by_cpuid(xc_handle, i , &pxstat_end[i]) ) # 481| for ( j = 0; j < pxstat_end[i].total; j++ ) # 482|-> sum_px[i] += pxstat_end[i].pt[j].residency - # 483| pxstat_start[i].pt[j].residency; # 484| } Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:489:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘printf’ from within signal handler # 487| get_avgfreq_by_cpuid(xc_handle, i, &avgfreq[i]); # 488| # 489|-> printf("Elapsed time (ms): %"PRIu64"\n", (usec_end - usec_start) / 1000UL); # 490| for ( i = 0; i < max_cpu_nr; i++ ) # 491| { Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:495:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘printf’ from within signal handler # 493| double avg_res; # 494| # 495|-> printf("\nCPU%d:\tResidency(ms)\t\tAvg Res(ms)\n",i); # 496| if ( cx_cap && sum_cx[i] > 0 ) # 497| { Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:624:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 622| for ( i = 0; i < 2 * max_cpu_nr; i++ ) # 623| { # 624|-> free(cxstat[i].triggers); # 625| free(cxstat[i].residencies); # 626| free(cxstat[i].pc); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:625:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 623| { # 624| free(cxstat[i].triggers); # 625|-> free(cxstat[i].residencies); # 626| free(cxstat[i].pc); # 627| free(cxstat[i].cc); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:626:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 624| free(cxstat[i].triggers); # 625| free(cxstat[i].residencies); # 626|-> free(cxstat[i].pc); # 627| free(cxstat[i].cc); # 628| free(pxstat[i].trans_pt); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:627:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 625| free(cxstat[i].residencies); # 626| free(cxstat[i].pc); # 627|-> free(cxstat[i].cc); # 628| free(pxstat[i].trans_pt); # 629| free(pxstat[i].pt); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:628:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 626| free(cxstat[i].pc); # 627| free(cxstat[i].cc); # 628|-> free(pxstat[i].trans_pt); # 629| free(pxstat[i].pt); # 630| } Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:629:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 627| free(cxstat[i].cc); # 628| free(pxstat[i].trans_pt); # 629|-> free(pxstat[i].pt); # 630| } # 631| free(cxstat); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:631:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 629| free(pxstat[i].pt); # 630| } # 631|-> free(cxstat); # 632| free(pxstat); # 633| free(sum); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:632:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 630| } # 631| free(cxstat); # 632|-> free(pxstat); # 633| free(sum); # 634| free(avgfreq); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:633:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 631| free(cxstat); # 632| free(pxstat); # 633|-> free(sum); # 634| free(avgfreq); # 635| out: Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:634:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 632| free(pxstat); # 633| free(sum); # 634|-> free(avgfreq); # 635| out: # 636| free(cputopo); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:636:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler # 634| free(avgfreq); # 635| out: # 636|-> free(cputopo); # 637| xc_interface_close(xc_handle); # 638| exit(0); Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:638:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler xen-4.18.1-build/xen-4.18.1/tools/misc/xenpm.c:638:5: note: ‘_exit’ is a possible signal-safe alternative for ‘exit’ # 636| free(cputopo); # 637| xc_interface_close(xc_handle); # 638|-> exit(0); # 639| } # 640| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c: scope_hint: In function ‘catch_exit’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c:43:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c:43:5: note: ‘_exit’ is a possible signal-safe alternative for ‘exit’ # 41| if (id) # 42| xc_watchdog(h, id, 300); # 43|-> exit(0); # 44| } # 45| Error: GCC_ANALYZER_WARNING (CWE-479): xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c: scope_hint: In function ‘catch_usr1’ xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c:50:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler xen-4.18.1-build/xen-4.18.1/tools/misc/xenwatchdogd.c:50:5: note: ‘_exit’ is a possible signal-safe alternative for ‘exit’ # 48| if (id) # 49| xc_watchdog(h, id, 0); # 50|-> exit(0); # 51| } # 52| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/ocaml/libs/xc/xenctrl_stubs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/ocaml/xenstored/select_stubs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/python/xen/lowlevel/xc/xc.c:170:11: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 168| config.grant_opts = XEN_DOMCTL_GRANT_version(max_grant_version); # 169| # 170|-> if ( (ret = xc_domain_create(self->xc_handle, &dom, &config)) < 0 ) # 171| return pyxc_error_to_exception(self->xc_handle); # 172| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/python/xen/lowlevel/xc/xc.c:174:15: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret' # 172| # 173| if ( target ) # 174|-> if ( (ret = xc_domain_set_target(self->xc_handle, dom, target)) < 0 ) # 175| return pyxc_error_to_exception(self->xc_handle); # 176| Error: CPPCHECK_WARNING (CWE-768): xen-4.18.1-build/xen-4.18.1/tools/tests/cpu-policy/test-cpu-policy.c:319: error[unknownEvaluationOrder]: Expression '.leaf={.leaf=(0xdu+1)}' depends on order of evaluation of side effects # 317| { # 318| .name = "OoB basic leaf", # 319|-> .leaf = { .leaf = CPUID_GUEST_NR_BASIC }, # 320| }, # 321| { Error: CPPCHECK_WARNING (CWE-768): xen-4.18.1-build/xen-4.18.1/tools/tests/cpu-policy/test-cpu-policy.c:339: error[unknownEvaluationOrder]: Expression '.leaf={.leaf=0x80000000|((0x8u+1)>(0x21u+1)?(0x8u+1):(0x21u+1))}' depends on order of evaluation of side effects # 337| { # 338| .name = "OoB extd leaf", # 339|-> .leaf = { .leaf = 0x80000000 | CPUID_GUEST_NR_EXTD }, # 340| }, # 341| }; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/tests/depriv/depriv-fd-checker.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/tests/paging-mempool/test-paging-mempool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/tests/x86_emulator/x86-emulate.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/tests/xenstore/test-xenstore.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/vchan/node-select.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/vchan/vchan-socket-proxy.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING: xen-4.18.1-build/xen-4.18.1/tools/vchan/vchan-socket-proxy.c: scope_hint: In function ‘main’ xen-4.18.1-build/xen-4.18.1/tools/vchan/vchan-socket-proxy.c:497:52: warning[-Wanalyzer-fd-type-mismatch]: ‘accept’ on non-stream-socket file descriptor ‘socket_fd’ # 495| /* wait for local socket connection */ # 496| if (strcmp(socket_path, "-") != 0) # 497|-> state.input_fd = state.output_fd = accept(socket_fd, # 498| NULL, NULL); # 499| if (state.input_fd == -1) { Error: GCC_ANALYZER_WARNING: xen-4.18.1-build/xen-4.18.1/tools/vchan/vchan-socket-proxy.c:497:52: warning[-Wanalyzer-fd-use-without-check]: ‘accept’ on possibly invalid file descriptor ‘socket_fd’ # 495| /* wait for local socket connection */ # 496| if (strcmp(socket_path, "-") != 0) # 497|-> state.input_fd = state.output_fd = accept(socket_fd, # 498| NULL, NULL); # 499| if (state.input_fd == -1) { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xcutils/readnotes.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenmon/xenbaked.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/xenmon/xenbaked.c:413: warning[uninitvar]: Uninitialized variable: pfn_list # 411| tbufs.meta[i] = xc_map_foreign_pages(xc_handle, DOMID_XEN, # 412| PROT_READ | PROT_WRITE, # 413|-> pfn_list, # 414| tbufs.t_info->tbuf_size); # 415| if ( tbufs.meta[i] == NULL ) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/pagein.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/policy_default.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/policy_default.c:81:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 79| unsigned long policy_choose_victim(struct xenpaging *paging) # 80| { # 81|-> xc_interface *xch = paging->xc_handle; # 82| unsigned long i; # 83| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:74:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 72| static int xenpaging_wait_for_event_or_timeout(struct xenpaging *paging) # 73| { # 74|-> xc_interface *xch = paging->xc_handle; # 75| xenevtchn_handle *xce = paging->vm_event.xce_handle; # 76| char **vec, *val; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:255:5: warning[deadcode.DeadStores]: Value stored to 'argv' is never read # 253| } # 254| # 255|-> argv += optind; argc -= optind; # 256| # 257| /* Path to pagefile is required */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:255:21: warning[deadcode.DeadStores]: Value stored to 'argc' is never read # 253| } # 254| # 255|-> argv += optind; argc -= optind; # 256| # 257| /* Path to pagefile is required */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:739:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 737| static void resume_pages(struct xenpaging *paging, int num_pages) # 738| { # 739|-> xc_interface *xch = paging->xc_handle; # 740| int i, num = 0; # 741| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:764:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 762| static int evict_victim(struct xenpaging *paging, int slot) # 763| { # 764|-> xc_interface *xch = paging->xc_handle; # 765| unsigned long gfn; # 766| static int num_paged_out; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:817:19: warning[deadcode.DeadStores]: Value stored to 'xch' during its initialization is never read # 815| static int evict_pages(struct xenpaging *paging, int num_pages) # 816| { # 817|-> xc_interface *xch = paging->xc_handle; # 818| int rc, slot, num = 0; # 819| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpaging/xenpaging.c:871:5: warning[deadcode.DeadStores]: Value stored to 'xch' is never read # 869| return 1; # 870| } # 871|-> xch = paging->xc_handle; # 872| # 873| DPRINTF("starting %s for domain_id %u with pagefile %s\n", Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpmd/xenpmd.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenpmd/xenpmd.c:465:17: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 463| { # 464| write_battery_status_to_xenstore(&status); # 465|-> ret = 1; # 466| /* rethink this; though I have never seen, there might be # 467| * systems out there with more than one battery device Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/control.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c:110:3: warning[deadcode.DeadStores]: Value stored to 'dummy' is never read # 108| # 109| if (ret <= 1024) { # 110|-> dummy = write(tracefd, sbuf, ret); # 111| return; # 112| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c:119:3: warning[deadcode.DeadStores]: Value stored to 'dummy' is never read # 117| va_end(arglist); # 118| if (str) { # 119|-> dummy = write(tracefd, str, strlen(str)); # 120| talloc_free(str); # 121| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c:170:2: warning[deadcode.DeadStores]: Value stored to 'dummy' is never read # 168| char c = 'A'; # 169| int dummy; # 170|-> dummy = write(reopen_log_pipe[1], &c, 1); # 171| } # 172| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c:499:17: warning[core.NullDereference]: Dereference of null pointer # 497| } # 498| # 499|-> fds[nr_fds].fd = fd; # 500| fds[nr_fds].events = events; # 501| ret = nr_fds; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/core.c:1433:2: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull' # 1431| if (!children) # 1432| return ENOMEM; # 1433|-> memcpy(children, parent->children, parent->hdr.childlen); # 1434| memcpy(children + parent->hdr.childlen, base, baselen); # 1435| parent->children = children; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/domain.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/hashtable.c:152:5: warning[deadcode.DeadStores]: Value stored to 'e' is never read # 150| hashvalue = hash(h, k); # 151| index = indexFor(h->tablelength, hashvalue); # 152|-> e = h->table[index]; # 153| # 154| for (e = h->table[index]; e; e = e->next) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/lu.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/talloc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/talloc.c:520:7: warning[unix.Malloc]: Use of memory after it is freed # 518| void *child = TC_PTR_FROM_CHUNK(tc->child); # 519| const void *new_parent = null_context; # 520|-> if (tc->child->refs) { # 521| struct talloc_chunk *p = talloc_parent_chunk(tc->child->refs); # 522| if (p) new_parent = TC_PTR_FROM_CHUNK(p); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/transaction.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xenstored/watch.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentop/xentop.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/mread.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘parse_symbol_file’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:311:12: warning[-Wanalyzer-null-argument]: use of NULL ‘fopen(fn, "rb")’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:22: included_from: Included from here. /usr/include/stdio.h:852:12: note: argument 1 of ‘feof’ must be non-null # 309| error(ERR_SYSTEM, NULL); # 310| } # 311|-> while(!feof(symbol_file)) { # 312| /* Allocate a new struct if we need it */ # 313| if(!*p) { Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:313:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(fn, "rb")’ # 311| while(!feof(symbol_file)) { # 312| /* Allocate a new struct if we need it */ # 313|-> if(!*p) { # 314| *p = malloc(sizeof(**p)); # 315| if(!*p) { Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:313:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(fn, "rb")’ # 311| while(!feof(symbol_file)) { # 312| /* Allocate a new struct if we need it */ # 313|-> if(!*p) { # 314| *p = malloc(sizeof(**p)); # 315| if(!*p) { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:319:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘G.symbols’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘parse_symbol_file’ # 317| error(ERR_SYSTEM, NULL); # 318| } # 319|-> (*p)->count=0; # 320| (*p)->next=NULL; # 321| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:2447:31: warning[unix.MallocSizeof]: Result of 'malloc' is converted to a pointer of type 'struct interval_element *', which is incompatible with sizeof operand type 'struct interval_list *' # 2445| void interval_table_alloc(int count) { # 2446| P.interval.array.count = count; # 2447|-> P.interval.array.values = malloc(count * sizeof(struct interval_list *)); # 2448| # 2449| if(!P.interval.array.values) { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘interval_list_add’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:2469:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘interval_list_add’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘interval_list_add’ # 2467| bzero(p, sizeof(*p)); # 2468| # 2469|-> p->elem = e; # 2470| strncpy(p->desc, desc, INTERVAL_DESC_MAX); # 2471| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:2553:19: warning[unix.MallocSizeof]: Result of 'malloc' is converted to a pointer of type 'struct cr3_value_struct *', which is incompatible with sizeof operand type 'struct eip_list_struct *' # 2551| return; # 2552| # 2553|-> qsort_array = malloc(N * sizeof(struct eip_list_struct *)); # 2554| # 2555| for(i=0, p=P.cr3.head; p; p=p->gnext, i++) Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘update_eip’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:2823:9: warning[-Wanalyzer-null-argument]: use of NULL ‘p’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘update_eip’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 2821| } # 2822| # 2823|-> bzero(p, sizeof(*p)); # 2824| # 2825| p->eip=eip; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘__hvm_set_summary_handler’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:2999:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:4328:9: note: in expansion of macro ‘hvm_set_summary_handler’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘__hvm_set_summary_handler’ # 2997| error(ERR_SYSTEM, NULL); # 2998| } # 2999|-> p->handler=s; # 3000| p->data = d; # 3001| p->next=*q; Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘update_io_address’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:3788:9: warning[-Wanalyzer-null-argument]: use of NULL ‘p’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘update_io_address’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 3786| } # 3787| # 3788|-> bzero(p, sizeof(*p)); # 3789| # 3790| p->pa=pa; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:4025:19: warning[unix.MallocSizeof]: Result of 'malloc' is converted to a pointer of type 'struct cr3_value_struct *', which is incompatible with sizeof operand type 'struct eip_list_struct *' # 4023| # 4024| /* Alloc a struct of the right size */ # 4025|-> qsort_array = malloc(N * sizeof(struct eip_list_struct *)); # 4026| # 4027| /* Point the array into it */ Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘cr3_dump_list.part.0’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:4029:23: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘qsort_array’ # 4027| /* Point the array into it */ # 4028| for(i=0, p=head; p; p=p->next, i++) # 4029|-> qsort_array[i]=p; # 4030| # 4031| /* Sort the array by time */ Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:4032:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘qsort_array’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:23: included_from: Included from here. /usr/include/stdlib.h:970:13: note: argument 1 of ‘qsort’ must be non-null # 4030| # 4031| /* Sort the array by time */ # 4032|-> qsort(qsort_array, N, sizeof(struct eip_list_struct *), # 4033| cr3_compare_start); # 4034| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:4725:8: warning[deadcode.DeadStores]: Value stored to 'cr' during its initialization is never read # 4723| unsigned vcpu:16, domain:16; # 4724| unsigned d[4]; # 4725|-> } *cr = (typeof(cr))ri->d; # 4726| # 4727| const char *evt_string; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:5736:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 5734| shadow_parse_other(ri, &r, h); # 5735| # 5736|-> e->gfn = r.gfn; # 5737| e->va = r.va; # 5738| e->pf_case = sevt.minor; Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘vcpu_create’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:6694:5: warning[-Wanalyzer-null-argument]: use of NULL ‘v’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:39: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘vcpu_create’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 6692| } # 6693| # 6694|-> bzero(v, sizeof(*v)); # 6695| # 6696| v->vid = vid; Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘domain_init’ xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:6715:5: warning[-Wanalyzer-null-argument]: use of NULL ‘d’ where non-null expected xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c: scope_hint: In function ‘domain_init’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 6713| void domain_init(struct domain_data *d, int did) # 6714| { # 6715|-> bzero(d, sizeof(*d)); # 6716| # 6717| d->did = did; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:8964:32: warning[deadcode.DeadStores]: Value stored to 'r' during its initialization is never read # 8962| { # 8963| struct record_info *ri = &p->ri; # 8964|-> struct lost_record_struct *r = (typeof(r))ri->d; # 8965| # 8966| if(!p->lost_record.active) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:9260:9: warning[deadcode.DeadStores]: Value stored to 'c' is never read # 9258| { # 9259| r = snprintf(c, len, " d%dv%d", p->current->d->did, p->current->vid); # 9260|-> c+=r; # 9261| len-=r; # 9262| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:9261:9: warning[deadcode.DeadStores]: Value stored to 'len' is never read # 9259| r = snprintf(c, len, " d%dv%d", p->current->d->did, p->current->vid); # 9260| c+=r; # 9261|-> len-=r; # 9262| } # 9263| else Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:9266:9: warning[deadcode.DeadStores]: Value stored to 'c' is never read # 9264| { # 9265| r = snprintf(c, len, " d?v?"); # 9266|-> c+=r; # 9267| len-=r; # 9268| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:9267:9: warning[deadcode.DeadStores]: Value stored to 'len' is never read # 9265| r = snprintf(c, len, " d?v?"); # 9266| c+=r; # 9267|-> len-=r; # 9268| } # 9269| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenalyze.c:9643:10: warning[deadcode.DeadStores]: Although the value stored to 'pid' is used in the enclosing expression, the value is never actually read from 'pid' # 9641| wait(NULL); # 9642| # 9643|-> if(!(pid = fork())) { # 9644| /* Child */ # 9645| char text[128]; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenctx.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenctx.c:809:51: warning[core.DivideZero]: Division by zero # 807| * were printed. # 808| */ # 809|-> for (k = j; k < xenctx.bytes_per_line / width; k++) # 810| printf(" %*s", width * 2, ""); # 811| printf(" "); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xenctx.c:819:25: warning[core.uninitialized.ArraySubscript]: Array subscript is undefined # 817| for (l = 0; l < width; l++) # 818| { # 819|-> if (isprint(*bytep)) # 820| printf("%c", *bytep); # 821| else Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xentrace.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/xentrace/xentrace.c:520: warning[uninitvar]: Uninitialized variable: pfn_list # 518| tbufs.meta[i] = xc_map_foreign_pages(xc_handle, DOMID_XEN, # 519| PROT_READ | PROT_WRITE, # 520|-> pfn_list, # 521| tbufs.t_info->tbuf_size); # 522| if ( tbufs.meta[i] == NULL ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xentrace/xentrace.c:968:5: warning[deadcode.DeadStores]: Value stored to 'c' is never read # 966| } # 967| # 968|-> c = 0; # 969| s = mask_str; # 970| do { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_block.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_cpupool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_cpupool.c:68:14: warning[deadcode.DeadStores]: Although the value stored to 'p' is used in the enclosing expression, the value is never actually read from 'p' # 66| # 67| while (optind < argc) { # 68|-> if ((p = strchr(argv[optind], '='))) { # 69| string_realloc_append(&extra_config, "\n"); # 70| string_realloc_append(&extra_config, argv[optind]); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_info.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_mem.c:103:9: warning[deadcode.DeadStores]: Value stored to 'shutdown_reason' is never read # 101| unsigned shutdown_reason; # 102| domname = libxl_domid_to_name(ctx, info[i].domid); # 103|-> shutdown_reason = info[i].shutdown ? info[i].shutdown_reason : 0; # 104| printf("%-40s %5d %5lu %5lu\n", # 105| domname, Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_migrate.c:278:13: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 276| # 277| if (common_domname) { # 278|-> libxl_domain_rename(ctx, domid, away_domname, common_domname); # 279| } # 280| rc = libxl_domain_resume(ctx, domid, 1, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_migrate.c:560:9: warning[deadcode.DeadStores]: Value stored to 'monitor' is never read # 558| case 'e': # 559| daemonize = 0; # 560|-> monitor = 0; # 561| break; # 562| case 'p': Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_misc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_nic.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:834:13: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 832| char *resolution; # 833| # 834|-> rc = split_string_into_pair(connectors[i], ':', # 835| &vdispl->connectors[i].unique_id, # 836| &resolution, NULL); Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c: scope_hint: In function ‘parse_vdispl_config’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:838:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘resolution’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:31: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:821:16: note: in expansion of macro ‘MATCH_OPTION’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:823:16: note: in expansion of macro ‘MATCH_OPTION’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl.h:18: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:29: included_from: Included from here. # 836| &resolution, NULL); # 837| # 838|-> rc= sscanf(resolution, "%ux%u", &vdispl->connectors[i].width, # 839| &vdispl->connectors[i].height); # 840| free(resolution); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:838:17: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 836| &resolution, NULL); # 837| # 838|-> rc= sscanf(resolution, "%ux%u", &vdispl->connectors[i].width, # 839| &vdispl->connectors[i].height); # 840| free(resolution); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:1166:17: warning[unix.Malloc]: Potential leak of memory pointed to by 'buf' # 1164| buf = strdup(item); # 1165| # 1166|-> p = strtok (buf, ","); # 1167| while (p != NULL) # 1168| { Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c: scope_hint: In function ‘parse_config_data’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:1627:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(buf)’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:51:5: note: in expansion of macro ‘ARRAY_EXTEND_INIT__CORE’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:1622:21: note: in expansion of macro ‘ARRAY_EXTEND_INIT_NODEVID’ # 1625| # 1626| dtdev->path = strdup(buf); # 1627|-> if (dtdev->path == NULL) { # 1628| fprintf(stderr, "unable to duplicate string for dtdevs\n"); # 1629| exit(-1); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:2327:23: warning[unix.Malloc]: Potential leak of memory pointed to by 'backend' # 2325| d_config->num_pvcallsifs = 0; # 2326| d_config->pvcallsifs = NULL; # 2327|-> while ((buf = xlu_cfg_get_listitem (pvcallsifs_devs, d_config->num_pvcallsifs)) != NULL) { # 2328| libxl_device_pvcallsif *pvcallsif; # 2329| char *backend = NULL; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:2480:13: warning[deadcode.DeadStores]: Value stored to 'vkb' is never read # 2478| libxl_device_vfb_init); # 2479| # 2480|-> vkb = ARRAY_EXTEND_INIT(d_config->vkbs, d_config->num_vkbs, # 2481| libxl_device_vkb_init); # 2482| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:2747:13: warning[deadcode.DeadStores]: Value stored to 'vkb' is never read # 2745| libxl_device_vfb_init); # 2746| # 2747|-> vkb = ARRAY_EXTEND_INIT(d_config->vkbs, d_config->num_vkbs, # 2748| libxl_device_vkb_init); # 2749| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:2992:5: warning[deadcode.DeadStores]: Value stored to 'p' is never read # 2990| # 2991| /* Count number of entries */ # 2992|-> p = strtok_r(s, delim, &saveptr); # 2993| do { # 2994| nr++; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_parse.c:2995:15: warning[deadcode.DeadStores]: Although the value stored to 'p' is used in the enclosing expression, the value is never actually read from 'p' # 2993| do { # 2994| nr++; # 2995|-> } while ((p = strtok_r(NULL, delim, &saveptr))); # 2996| # 2997| free(s); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_psr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_psr.c:699:9: warning[deadcode.DeadStores]: Value stored to 'type' is never read # 697| } # 698| } else { # 699|-> type = LIBXL_PSR_CBM_TYPE_L3_CBM; # 700| fprintf(stderr, "Input lvl %d is wrong\n", lvl); # 701| return EXIT_FAILURE; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_saverestore.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_sched.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_sxp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_usb.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vcpu.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vcpu.c: scope_hint: In function ‘main_vcpupin’ xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vcpu.c:253:30: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected xen-4.18.1-build/xen-4.18.1/tools/include/libxl.h:804: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vcpu.c:18: included_from: Included from here. /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 251| * to pass NULL to libxl_set_vcpuaffinity() if it is not specified. # 252| */ # 253|-> if (argc <= optind+3 || !strcmp(soft_str, "-")) # 254| soft = NULL; # 255| else if (parse_cpurange(soft_str, soft)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vcpu.c:253:30: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull' # 251| * to pass NULL to libxl_set_vcpuaffinity() if it is not specified. # 252| */ # 253|-> if (argc <= optind+3 || !strcmp(soft_str, "-")) # 254| soft = NULL; # 255| else if (parse_cpurange(soft_str, soft)) Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vdispl.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vmcontrol.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-909): xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vmcontrol.c:805: error[uninitStructMember]: Uninitialized struct member: hdr.mandatory_flags # 803| } # 804| config_source = "<saved>"; # 805|-> config_in_json = !!(hdr.mandatory_flags & XL_MANDATORY_FLAG_JSON); # 806| } # 807| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vmcontrol.c:1141:9: warning[deadcode.DeadStores]: Value stored to 'restore_fd_to_close' is never read # 1139| fprintf(stderr, "Failed to close restoring file, fd %d, errno %d\n", # 1140| restore_fd_to_close, errno); # 1141|-> restore_fd_to_close = -1; # 1142| } # 1143| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vsnd.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xl/xl_vtpm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_client.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c: scope_hint: In function ‘add_to_buf’ xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:20:10: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’ # 18| return -1; # 19| # 20|-> *buf = realloc(*buf, len + vallen); # 21| if (!*buf) # 22| return -1; Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c: scope_hint: In function ‘live_update_start’ xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:36:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’ # 34| # 35| if (asprintf(&ret, "%u", to) < 0) # 36|-> return 1; # 37| len = add_to_buf(&buf, "-s", len); # 38| len = add_to_buf(&buf, "-t", len); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:44:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'buf' # 42| len = add_to_buf(&buf, "-F", len); # 43| if (len < 0) # 44|-> return 1; # 45| # 46| ret = strdup("BUSY"); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:87:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'buf' # 85| len = add_to_buf(&buf, cmdline, len); # 86| if (len < 0) # 87|-> return 1; # 88| # 89| ret = xs_control_command(xsh, "live-update", buf, len); Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c: scope_hint: In function ‘send_kernel_blob’ xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:113:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’ # 111| if (!xch) { # 112| fprintf(stderr, "xc_interface_open() failed\n"); # 113|-> return 1; # 114| } # 115| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:136:14: warning[unix.Malloc]: Potential leak of memory pointed to by 'buf' # 134| free(ret); # 135| if (len < 0) { # 136|-> rc = 1; # 137| goto out_rel; # 138| } Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c: scope_hint: In function ‘live_update_daemon’ xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:242:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’ # 240| len = add_to_buf(&buf, binary, len); # 241| if (len < 0) # 242|-> return 1; # 243| ret = xs_control_command(xsh, "live-update", buf, len); # 244| free(buf); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:242:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'buf' # 240| len = add_to_buf(&buf, binary, len); # 241| if (len < 0) # 242|-> return 1; # 243| ret = xs_control_command(xsh, "live-update", buf, len); # 244| free(buf); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/xs-clients/xenstore_control.c:373:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'par' # 371| # 372| out: # 373|-> free(par); # 374| return rc; # 375| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/acpi/cpufreq/hwp.c:586:9: warning[deadcode.DeadStores]: Value stored to 'cleared_act_window' is never read # 584| { # 585| set_cppc->set_params &= ~XEN_SYSCTL_CPPC_SET_ACT_WINDOW; # 586|-> cleared_act_window = true; # 587| } # 588| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/boot/mkelf32.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/boot/reloc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/intel_cacheinfo.c:196:5: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 194| /* Byte 0 is level count, not a descriptor */ # 195| for ( j = 1 ; j < 16 ; j++ ) { # 196|-> unsigned char des = dp[j]; # 197| unsigned char k = 0; # 198| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/mcheck/mce.c:972:5: warning[deadcode.DeadStores]: Value stored to 'c' is never read # 970| # 971| log_cpus = v; # 972|-> c = &cpu_data[cpu]; # 973| cindex = 0; # 974| cpn = cpu - 1; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/mcheck/vmce.c:525:5: warning[deadcode.DeadStores]: Value stored to 'r_mfn' is never read # 523| # 524| rc = -1; # 525|-> r_mfn = get_gfn_query(d, gfn, &pt); # 526| if ( p2m_to_mask(pt) & P2M_UNMAP_TYPES) # 527| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/vpmu.c:65:20: warning[deadcode.DeadStores]: Although the value stored to 'val' is used in the enclosing expression, the value is never actually read from 'val' # 63| else if ( !cmdline_strcmp(s, "arch") ) # 64| vpmu_features |= XENPMU_FEATURE_ARCH_ONLY; # 65|-> else if ( (val = parse_boolean("rtm-abort", s, ss)) >= 0 ) # 66| printk(XENLOG_WARNING # 67| "'rtm-abort=<bool>' superseded. Use 'tsx=<bool>' instead\n"); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/vpmu_intel.c:663:40: warning[core.BitwiseShift]: Left shift overflows the capacity of 'unsigned long long' # 661| # 662| if ( msr_content & ARCH_CNTR_ENABLED ) # 663|-> *enabled_cntrs |= 1ULL << tmp; # 664| else # 665| *enabled_cntrs &= ~(1ULL << tmp); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/vpmu_intel.c:665:42: warning[core.BitwiseShift]: Left shift overflows the capacity of 'unsigned long long' # 663| *enabled_cntrs |= 1ULL << tmp; # 664| else # 665|-> *enabled_cntrs &= ~(1ULL << tmp); # 666| # 667| xen_pmu_cntr_pair[tmp].control = msr_content; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/domain.c:980:5: warning[deadcode.DeadStores]: Value stored to 'owner' is never read # 978| */ # 979| # 980|-> owner = page_get_owner_and_reference(page); # 981| ASSERT( owner == d ); # 982| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/domain.c:1590:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 1588| struct vcpu_register_time_memory_area area; # 1589| # 1590|-> rc = -ENOSYS; # 1591| if ( 0 /* TODO: Dom's XENFEAT_vcpu_time_phys_area setting */ ) # 1592| break; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/domain_page.c: scope_hint: In function ‘unmap_domain_page’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/domain_page.c:192:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’ # 190| ASSERT(v && is_pv_vcpu(v)); # 191| # 192|-> dcache = &v->domain->arch.pv.mapcache; # 193| ASSERT(dcache->inuse); # 194| Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/efi/mkreloc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/emul-i8254.c:276:17: warning[deadcode.DeadStores]: Value stored to 's' is never read # 274| for ( channel = 0; channel < 3; channel++ ) # 275| { # 276|-> s = &pit->hw.channels[channel]; # 277| if ( val & (2 << channel) ) # 278| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/dm.c:127:42: warning[core.UndefinedBinaryOperatorResult]: The left operand of '/' is a garbage value # 125| return 0; # 126| # 127|-> if ( (bufs->buf[EXTENTS_BUFFER].size / # 128| sizeof(struct xen_dm_op_modified_memory_extent)) < # 129| *rem_extents ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/dm.c:369:31: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<' is a garbage value # 367| # 368| rc = -EFAULT; # 369|-> if ( op_args->buf[0].size < offset ) # 370| goto out; # 371| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:1850:36: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 1848| # 1849| if ( hvio->mmio_access.read_access && # 1850|-> (hvio->mmio_gla == (saddr & PAGE_MASK)) && # 1851| /* # 1852| * Upon initial invocation don't truncate large batches just because Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:1863:14: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 1861| else # 1862| { # 1863|-> rc = hvmemul_linear_to_phys(saddr, &sgpa, bytes_per_rep, reps, pfec, # 1864| hvmemul_ctxt); # 1865| if ( rc != X86EMUL_OKAY ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:1870:36: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 1868| # 1869| if ( hvio->mmio_access.write_access && # 1870|-> (hvio->mmio_gla == (daddr & PAGE_MASK)) && # 1871| /* See comment above. */ # 1872| (curr->io.req.state == STATE_IORESP_READY || Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:1878:14: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 1876| else # 1877| { # 1878|-> rc = hvmemul_linear_to_phys(daddr, &dgpa, bytes_per_rep, reps, # 1879| pfec | PFEC_write_access, hvmemul_ctxt); # 1880| if ( rc != X86EMUL_OKAY ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:2006:35: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 2004| # 2005| if ( hvio->mmio_access.write_access && # 2006|-> (hvio->mmio_gla == (addr & PAGE_MASK)) && # 2007| /* See respective comment in MOVS processing. */ # 2008| (curr->io.req.state == STATE_IORESP_READY || Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:2019:14: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 2017| pfec |= PFEC_user_mode; # 2018| # 2019|-> rc = hvmemul_linear_to_phys(addr, &gpa, bytes_per_rep, reps, pfec, # 2020| hvmemul_ctxt); # 2021| if ( rc != X86EMUL_OKAY ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/emulate.c:2320:19: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 2318| pfec |= PFEC_user_mode; # 2319| # 2320|-> mapping = hvmemul_map_linear_addr(addr, 0, pfec, hvmemul_ctxt); # 2321| if ( mapping == ERR_PTR(~X86EMUL_EXCEPTION) ) # 2322| return X86EMUL_EXCEPTION; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/hvm.c:546:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 544| if ( hvm_get_pending_event(v, &info) ) # 545| { # 546|-> hvm_monitor_interrupt(info.vector, info.type, info.error_code, # 547| info.cr2); # 548| v->arch.monitor.next_interrupt_enabled = false; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/hvm.c:4077:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 4075| # 4076| vlapic_reset(vcpu_vlapic(v)); # 4077|-> rc = vcpu_reset(v); # 4078| ASSERT(!rc); # 4079| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/hvm.c:5296:32: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value # 5294| * Unconditionally recalculate G. # 5295| */ # 5296|-> reg->g = !!(reg->limit >> 20); # 5297| # 5298| /* Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c: scope_hint: In function ‘rtc_timer_update’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c:151:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/vlapic.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/vcpu.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/domain.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c:25: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c:46:25: note: in expansion of macro ‘pt_global_vcpu_target’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c:127:22: note: in expansion of macro ‘vrtc_vcpu’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/rtc.c:148:32: note: in expansion of macro ‘NOW’ # 149| # 150| s->period = period; # 151|-> if ( v->domain->arch.hvm.params[HVM_PARAM_VPT_ALIGN] ) # 152| delta = 0; # 153| else Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/svm/nestedsvm.c:936:25: warning[deadcode.DeadStores]: Value stored to 'ns_vmcb' during its initialization is never read # 934| struct nestedvcpu *nv = &vcpu_nestedhvm(v); # 935| struct nestedsvm *svm = &vcpu_nestedsvm(v); # 936|-> struct vmcb_struct *ns_vmcb = nv->nv_vvmcx; # 937| enum nestedhvm_vmexits vmexits; # 938| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/svm/nestedsvm.c:943:26: warning[core.BitwiseShift]: Left shift overflows the capacity of 'unsigned long long' # 941| case VMEXIT_CR0_READ ... VMEXIT_CR15_READ: # 942| case VMEXIT_CR0_WRITE ... VMEXIT_CR15_WRITE: # 943|-> exit_bits = 1ULL << (exitcode - VMEXIT_CR0_READ); # 944| if ( svm->ns_cr_intercepts & exit_bits ) # 945| break; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/svm/nestedsvm.c:950:26: warning[core.BitwiseShift]: Left shift overflows the capacity of 'unsigned long long' # 948| case VMEXIT_DR0_READ ... VMEXIT_DR7_READ: # 949| case VMEXIT_DR0_WRITE ... VMEXIT_DR7_WRITE: # 950|-> exit_bits = 1ULL << (exitcode - VMEXIT_DR0_READ); # 951| if ( svm->ns_dr_intercepts & exit_bits ) # 952| break; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/svm/svm.c:2651:9: warning[deadcode.DeadStores]: Value stored to 'exitinfo1' is never read # 2649| * exitinfo1 value there. # 2650| */ # 2651|-> exitinfo1 = ns_vmcb->exitinfo1; # 2652| ns_vmcb->exitinfo1 = vmcb->exitinfo1; # 2653| nsret = nestedsvm_check_intercepts(v, regs, exit_reason); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vioapic.c:238:5: warning[deadcode.DeadStores]: Value stored to 'prev_level' is never read # 236| pent = &vioapic->redirtbl[idx]; # 237| ent = *pent; # 238|-> prev_level = ent.fields.trig_mode == VIOAPIC_LEVEL_TRIG; # 239| # 240| if ( top_word ) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vioapic.c: scope_hint: In function ‘vioapic_write_indirect’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vioapic.c:340:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘vioapic’ # 338| redir_index, vioapic->ioregsel & 1 ? "hi" : "lo", val); # 339| # 340|-> if ( redir_index >= vioapic->nr_pins ) # 341| { # 342| gdprintk(XENLOG_WARNING, "vioapic_write_indirect " Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vlapic.c:281:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 279| /* Reset necessary VCPU state. This does not include FPU state. */ # 280| fpu_initialised = target->fpu_initialised; # 281|-> rc = vcpu_reset(target); # 282| ASSERT(!rc); # 283| target->fpu_initialised = fpu_initialised; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmsi.c:810:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 808| int rc; # 809| # 810|-> rc = pt_irq_destroy_bind(pdev->domain, &bind); # 811| ASSERT(!rc); # 812| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vmcs.c:843:12: warning[deadcode.DeadStores]: Value stored to 'okay' during its initialization is never read # 841| void vmx_vmcs_enter(struct vcpu *v) # 842| { # 843|-> bool_t okay = vmx_vmcs_try_enter(v); # 844| # 845| ASSERT(okay); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vmx.c:107:5: warning[deadcode.DeadStores]: Value stored to 'old_lock' is never read # 105| # 106| spin_lock_irqsave(pi_blocking_list_lock, flags); # 107|-> old_lock = cmpxchg(&v->arch.hvm.vmx.pi_blocking.lock, NULL, # 108| pi_blocking_list_lock); # 109| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vmx.c:123:5: warning[deadcode.DeadStores]: Value stored to 'dest' is never read # 121| ASSERT(!pi_test_sn(pi_desc)); # 122| # 123|-> dest = cpu_physical_id(v->processor); # 124| # 125| ASSERT(pi_desc->ndst == Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vmx.c:3640:21: warning[core.NullDereference]: Access to field 'count' results in a dereference of a null pointer (loaded from variable 'lbr') # 3638| const struct lbr_info *lbr = model_specific_lbr; # 3639| # 3640|-> for ( ; lbr->count; lbr++ ) # 3641| { # 3642| unsigned int i; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vvmx.c:487:18: warning[deadcode.DeadStores]: Value stored to 'v' during its initialization is never read # 485| static void vmfail_invalid(struct cpu_user_regs *regs) # 486| { # 487|-> struct vcpu *v = current; # 488| unsigned int eflags = regs->eflags; # 489| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/vmx/vvmx.c:1169:29: warning[core.NullDereference]: Access to field 'vmcs_revision_id' results in a dereference of a null pointer (loaded from variable 'vvmcs') # 1167| # 1168| __vmpclear(vvmcs_maddr); # 1169|-> vvmcs->vmcs_revision_id |= VMCS_RID_TYPE_MASK; # 1170| v->arch.hvm.vmx.secondary_exec_control |= # 1171| SECONDARY_EXEC_ENABLE_VMCS_SHADOWING; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/i387.c:32:5: warning[deadcode.DeadStores]: Value stored to 'ok' is never read # 30| * we set the accumulated feature mask before doing save/restore. # 31| */ # 32|-> ok = set_xcr0(v->arch.xcr0_accum | XSTATE_FP_SSE); # 33| ASSERT(ok); # 34| xrstor(v, mask); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/i387.c:35:5: warning[deadcode.DeadStores]: Value stored to 'ok' is never read # 33| ASSERT(ok); # 34| xrstor(v, mask); # 35|-> ok = set_xcr0(v->arch.xcr0 ?: XSTATE_FP_SSE); # 36| ASSERT(ok); # 37| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/i387.c:145:5: warning[deadcode.DeadStores]: Value stored to 'ok' is never read # 143| * we set the accumulated feature mask before doing save/restore. # 144| */ # 145|-> ok = set_xcr0(v->arch.xcr0_accum | XSTATE_FP_SSE); # 146| ASSERT(ok); # 147| xsave(v, mask); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/i387.c:148:5: warning[deadcode.DeadStores]: Value stored to 'ok' is never read # 146| ASSERT(ok); # 147| xsave(v, mask); # 148|-> ok = set_xcr0(v->arch.xcr0 ?: XSTATE_FP_SSE); # 149| ASSERT(ok); # 150| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/grant_table.h:27: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/smp.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/smp.h:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/bitops.h:106: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/bitops.h:101:37: warning[core.uninitialized.Assign]: The left expression of the compound assignment is an uninitialized value. The computed value will also be garbage # 99| static inline void constant_clear_bit(int nr, void *addr) # 100| { # 101|-> ((unsigned int *)addr)[nr >> 5] &= ~(1u << (nr & 31)); # 102| } # 103| #define __clear_bit(nr, addr) ({ \ Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h: scope_hint: In function ‘iomem_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/iocap.h:19:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:18:18: note: in expansion of macro ‘cache_flush_permitted’ xen-4.18.1-build/xen-4.18.1/xen/include/xsm/xsm.h:827: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/hypercall.h:22: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:25: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘iomem_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘iomem_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:49:30: note: in definition of macro ‘iomem_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:681:38: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘iomem_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:18:18: note: in expansion of macro ‘cache_flush_permitted’ # 17| # 18| #define cache_flush_permitted(d) \ # 19|-> (!rangeset_is_empty((d)->iomem_caps) || \ # 20| !rangeset_is_empty((d)->arch.ioport_caps)) # 21| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/shared.h:31:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:15:34: note: in definition of macro ‘has_32bit_shinfo’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/shared.h:81:1: note: in expansion of macro ‘GET_SET_VCPU’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c: scope_hint: In function ‘show_registers’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/regs.h:9:34: note: in expansion of macro ‘guest_cpu_user_regs’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:133:10: note: in expansion of macro ‘guest_mode’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/x86_emulate.h:17: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/mm.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/mm.h:230: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c: scope_hint: In function ‘show_registers’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:133:10: note: in expansion of macro ‘guest_mode’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:142:14: note: in expansion of macro ‘guest_mode’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/shared.h:81:1: note: in expansion of macro ‘GET_SET_VCPU’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:15:34: note: in definition of macro ‘has_32bit_shinfo’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/shared.h:81:1: note: in expansion of macro ‘GET_SET_VCPU’ # 29| const vcpu_info_t *vi = v->vcpu_info_area.map; \ # 30| \ # 31|-> return !has_32bit_shinfo(v->domain) ? \ # 32| vi->native.arch.field : vi->compat.arch.field; \ # 33| } \ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:24: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/shared.h:81:1: warning[core.NullDereference]: Dereference of null pointer # 79| GET_SET_SHARED(unsigned long, nmi_reason) # 80| # 81|-> GET_SET_VCPU(unsigned long, cr2) # 82| # 83| #undef GET_SET_VCPU Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/io_apic.c:1190:48: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value # 1188| * value, so ignore it if reg_02 == reg_01. # 1189| */ # 1190|-> if (reg_01.bits.version >= 0x10 && reg_02.raw != reg_01.raw) { # 1191| printk(KERN_DEBUG ".... register #02: %08X\n", reg_02.raw); # 1192| printk(KERN_DEBUG "....... : arbitration: %02X\n", reg_02.bits.arbitration); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/io_apic.c:1202:48: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value # 1200| * register value, so ignore it if reg_03 == reg_0[12]. # 1201| */ # 1202|-> if (reg_01.bits.version >= 0x20 && reg_03.raw != reg_02.raw && # 1203| reg_03.raw != reg_01.raw) { # 1204| printk(KERN_DEBUG ".... register #03: %08X\n", reg_03.raw); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/io_apic.c:1202:48: warning[core.UndefinedBinaryOperatorResult]: The right operand of '!=' is a garbage value # 1200| * register value, so ignore it if reg_03 == reg_0[12]. # 1201| */ # 1202|-> if (reg_01.bits.version >= 0x20 && reg_03.raw != reg_02.raw && # 1203| reg_03.raw != reg_01.raw) { # 1204| printk(KERN_DEBUG ".... register #03: %08X\n", reg_03.raw); Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c: scope_hint: In function ‘create_irq’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:278:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘desc’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/io.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/domain.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/domain.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/event.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/irq.h:153:31: note: in expansion of macro ‘pirq_info’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/irq.h:194:37: note: in expansion of macro ‘pirq_field’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2121:15: note: in expansion of macro ‘domain_pirq_to_irq’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/config.h:17: included_from: Included from here. <command-line>: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:20:43: note: in definition of macro ‘likely’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2141:18: note: in expansion of macro ‘irq_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2172:15: note: in expansion of macro ‘cpu_has_apic’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c: scope_hint: In function ‘create_irq’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2190:9: note: in expansion of macro ‘spin_lock_irqsave’ # 276| return -ENOSPC; # 277| # 278|-> ret = init_one_irq_desc(desc); # 279| if (!ret) # 280| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:1258:31: warning[core.NullDereference]: Access to field 'pirq' results in a dereference of a null pointer (loaded from variable 'pirq') # 1256| radix_tree_replace_slot( # 1257| radix_tree_lookup_slot(&d->arch.irq_pirq, irq), # 1258|-> radix_tree_int_to_ptr(pirq->pirq)); # 1259| pirq->arch.irq = irq; # 1260| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:1989:9: warning[deadcode.DeadStores]: Value stored to 'tsc_in' is never read # 1987| } # 1988| # 1989|-> tsc_in = tb_init_done ? get_cycles() : 0; # 1990| do_IRQ_guest(desc, vector); # 1991| TRACE_3D(TRC_HW_IRQ_HANDLED, irq, tsc_in, get_cycles()); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2013:9: warning[deadcode.DeadStores]: Value stored to 'tsc_in' is never read # 2011| spin_unlock_irq(&desc->lock); # 2012| # 2013|-> tsc_in = tb_init_done ? get_cycles() : 0; # 2014| action->handler(irq, action->dev_id, regs); # 2015| TRACE_3D(TRC_HW_IRQ_HANDLED, irq, tsc_in, get_cycles()); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2223:13: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 2221| break; # 2222| # 2223|-> set_domain_irq_pirq(d, irq, info); # 2224| spin_unlock_irqrestore(&desc->lock, flags); # 2225| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2288:9: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 2286| } # 2287| # 2288|-> set_domain_irq_pirq(d, irq, info); # 2289| spin_unlock_irqrestore(&desc->lock, flags); # 2290| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/irq.c:2294:9: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value # 2292| { # 2293| spin_lock_irqsave(&desc->lock, flags); # 2294|-> set_domain_irq_pirq(d, irq, info); # 2295| spin_unlock_irqrestore(&desc->lock, flags); # 2296| ret = 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/hap/nested_hap.c:180:10: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 178| # 179| /* ==> we have to walk L0 P2M */ # 180|-> rv = nestedhap_walk_L0_p2m(p2m, L1_gpa, &L0_gpa, &p2mt_10, &p2ma_10, # 181| &page_order_10, npfec); # 182| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/mem_access.c:157:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 155| if ( npfec.write_access && p2ma == p2m_access_rx2rw ) # 156| { # 157|-> rc = p2m->set_entry(p2m, gfn, mfn, PAGE_ORDER_4K, p2mt, p2m_access_rw, -1); # 158| ASSERT(rc == 0); # 159| gfn_unlock(p2m, gfn, 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/mem_access.c:165:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 163| { # 164| ASSERT(npfec.write_access || npfec.read_access || npfec.insn_fetch); # 165|-> rc = p2m->set_entry(p2m, gfn, mfn, PAGE_ORDER_4K, # 166| p2mt, p2m_access_rwx, -1); # 167| ASSERT(rc == 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/mem_access.c:192:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 190| * restrictions. This set must succeed: we have the # 191| * gfn locked and just did a successful get_entry(). */ # 192|-> rc = p2m->set_entry(p2m, gfn, mfn, PAGE_ORDER_4K, # 193| p2mt, p2m_access_rwx, -1); # 194| ASSERT(rc == 0); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:348:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 346| iommu_sync_cache(next, EPT_PAGETABLE_ENTRIES * sizeof(ept_entry_t)); # 347| # 348|-> rc = atomic_write_ept_entry(p2m, ept_entry, e, next_level); # 349| ASSERT(rc == 0); # 350| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:391:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 389| if ( recalc ) # 390| e.recalc = 1; # 391|-> rc = atomic_write_ept_entry(p2m, &epte[i], e, level - 1); # 392| ASSERT(rc == 0); # 393| changed = true; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:443:9: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 441| goto out; # 442| } # 443|-> wrc = atomic_write_ept_entry(p2m, &table[index], split_ept_entry, i); # 444| ASSERT(wrc == 0); # 445| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:465:13: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 463| e.emt = MTRR_NUM_TYPES; # 464| e.recalc = 1; # 465|-> wrc = atomic_write_ept_entry(p2m, &table[index], e, target); # 466| ASSERT(wrc == 0); # 467| rc = 1; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:671:21: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 669| } # 670| e.recalc = 0; # 671|-> wrc = atomic_write_ept_entry(p2m, &epte[i], e, level); # 672| ASSERT(wrc == 0); # 673| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:708:25: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 706| if ( ept_split_super_page(p2m, &e, level, level - 1) ) # 707| { # 708|-> wrc = atomic_write_ept_entry(p2m, &epte[i], e, level); # 709| ASSERT(wrc == 0); # 710| unmap_domain_page(epte); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:723:17: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 721| if ( recalc && p2m_is_changeable(e.sa_p2mt) ) # 722| ept_p2m_type_to_flags(p2m, &e); # 723|-> wrc = atomic_write_ept_entry(p2m, &epte[i], e, level); # 724| ASSERT(wrc == 0); # 725| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:738:13: warning[deadcode.DeadStores]: Value stored to 'wrc' is never read # 736| e.emt = 0; # 737| e.recalc = 0; # 738|-> wrc = atomic_write_ept_entry(p2m, &epte[i], e, level); # 739| ASSERT(wrc == 0); # 740| unmap_domain_page(epte); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:836:5: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 834| table = map_domain_page(pagetable_get_mfn(p2m_get_pagetable(p2m))); # 835| # 836|-> ret = GUEST_TABLE_MAP_FAILED; # 837| for ( i = ept->wl; i > target; i-- ) # 838| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:897:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 895| /* now install the newly split ept sub-tree */ # 896| /* NB: please make sure domian is paused and no in-fly VT-d DMA. */ # 897|-> rc = atomic_write_ept_entry(p2m, ept_entry, split_ept_entry, i); # 898| ASSERT(rc == 0); # 899| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/p2m-ept.c:1053:13: warning[deadcode.DeadStores]: Value stored to 'ept_entry' is never read # 1051| # 1052| index = gfn_remainder >> ( i * EPT_TABLE_ORDER); # 1053|-> ept_entry = table + index; # 1054| # 1055| if ( p2m_pod_demand_populate(p2m, gfn_, i * EPT_TABLE_ORDER) ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/common.c:1593:39: warning[core.NullDereference]: Dereference of null pointer # 1591| ASSERT(prev); # 1592| /* Delete sp from the list */ # 1593|-> prev->next_shadow = sp->next_shadow; # 1594| /* Re-insert it at the head of the list */ # 1595| set_next_shadow(sp, d->arch.paging.shadow.hash_table[key]); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/common.c:2513:5: warning[core.NullDereference]: Access to field 'update_cr3' results in a dereference of a null pointer (loaded from field 'mode') # 2511| #endif /* OOS */ # 2512| # 2513|-> v->arch.paging.mode->update_cr3(v, false); # 2514| } # 2515| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘hvm_read’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:114:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘hvm_read’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘hvm_read’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘hvm_read’ # 112| return rc; # 113| # 114|-> rc = hvm_copy_from_guest_linear(p_data, addr, bytes, # 115| (access_type == hvm_access_insn_fetch # 116| ? PFEC_insn_fetch : 0), Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:114:10: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 112| return rc; # 113| # 114|-> rc = hvm_copy_from_guest_linear(p_data, addr, bytes, # 115| (access_type == hvm_access_insn_fetch # 116| ? PFEC_insn_fetch : 0), Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:196:16: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 194| # 195| /* Unaligned writes are only acceptable on HVM */ # 196|-> if ( (addr & (bytes - 1)) && !is_hvm_vcpu(v) ) # 197| return X86EMUL_UNHANDLEABLE; # 198| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:250:16: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 248| # 249| /* Unaligned writes are only acceptable on HVM */ # 250|-> if ( (addr & (bytes - 1)) && !is_hvm_vcpu(v) ) # 251| return X86EMUL_UNHANDLEABLE; # 252| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_init_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:334:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_init_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_init_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_init_emulation’ # 332| x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf), # 333| hvm_access_insn_fetch, sh_ctxt, &addr) && # 334|-> !hvm_copy_from_guest_linear( # 335| sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf), # 336| PFEC_insn_fetch, NULL)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:334:11: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 332| x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf), # 333| hvm_access_insn_fetch, sh_ctxt, &addr) && # 334|-> !hvm_copy_from_guest_linear( # 335| sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf), # 336| PFEC_insn_fetch, NULL)) Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_continue_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:365:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_continue_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_continue_emulation’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c: scope_hint: In function ‘shadow_continue_emulation’ # 363| x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf), # 364| hvm_access_insn_fetch, sh_ctxt, &addr) && # 365|-> !hvm_copy_from_guest_linear( # 366| sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf), # 367| PFEC_insn_fetch, NULL)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:365:15: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value # 363| x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf), # 364| hvm_access_insn_fetch, sh_ctxt, &addr) && # 365|-> !hvm_copy_from_guest_linear( # 366| sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf), # 367| PFEC_insn_fetch, NULL)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/hvm.c:1132:30: warning[core.NullDereference]: Dereference of null pointer # 1130| sl1e = map_sl1p + (sl1ma & ~PAGE_MASK); # 1131| # 1132|-> if ( l1e_get_flags(*sl1e) & _PAGE_DIRTY ) # 1133| { # 1134| dirty = 1; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/guest_2.c:2: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/multi.c:1764:5: warning[deadcode.DeadStores]: Value stored to 'shadow_idx' is never read # 1762| guest_idx = guest_index(new_gp); # 1763| map_mfn = smfn; # 1764|-> shadow_idx = shadow_index(&map_mfn, guest_idx); # 1765| sl1p = map_domain_page(map_mfn); # 1766| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/multi.c:3015:12: warning[deadcode.DeadStores]: Although the value stored to 'walk_ok' is used in the enclosing expression, the value is never actually read from 'walk_ok' # 3013| #endif /* (SHADOW_OPTIMIZATIONS & SHOPT_VIRTUAL_TLB) */ # 3014| # 3015|-> if ( !(walk_ok = sh_walk_guest_tables(v, va, &gw, *pfec)) ) # 3016| { # 3017| *pfec = gw.pfec; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/multi.c:3340:19: warning[deadcode.DeadStores]: Value stored to 'smfn' during its initialization is never read # 3338| #if SHADOW_PAGING_LEVELS == 3 # 3339| { # 3340|-> mfn_t smfn = pagetable_get_mfn(v->arch.paging.shadow.shadow_table[0]); # 3341| unsigned int i; # 3342| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/multi.c:3465:5: warning[deadcode.DeadStores]: Value stored to 'r' is never read # 3463| /* Found it! Need to remove its write permissions. */ # 3464| sl1e = shadow_l1e_remove_flags(sl1e, _PAGE_RW); # 3465|-> r = shadow_set_l1e(d, sl1p, sl1e, p2m_ram_rw, smfn); # 3466| ASSERT( !(r & SHADOW_SET_ERROR) ); # 3467| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/mm/shadow/set.c:100:12: warning[deadcode.DeadStores]: Although the value stored to 'res' is used in the enclosing expression, the value is never actually read from 'res' # 98| */ # 99| if ( owner && (d != owner) && # 100|-> !(res = xsm_priv_mapping(XSM_TARGET, d, owner)) ) # 101| { # 102| res = get_page_from_l1e(sl1e, d, owner); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/pci.c:37:9: warning[deadcode.DeadStores]: Value stored to 'value' is never read # 35| break; # 36| default: # 37|-> value = 0; # 38| BUG(); # 39| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/pv/emul-priv-op.c:1339:5: warning[deadcode.DeadStores]: Value stored to 'eflags' is never read # 1337| ASSERT(!(regs->eflags & X86_EFLAGS_IOPL)); # 1338| regs->eflags |= curr->arch.pv.iopl; # 1339|-> eflags = regs->eflags; # 1340| # 1341| ctxt.ctxt.addr_size = ar & _SEGMENT_L ? 64 : ar & _SEGMENT_DB ? 32 : 16; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/pv/hypercall.c:35:23: warning[deadcode.DeadStores]: Value stored to 'r8' during its initialization is never read # 33| unsigned long rdx = regs->rdx; # 34| unsigned long r10 = regs->r10; # 35|-> unsigned long r8 = regs->r8; # 36| # 37| eax = regs->rax; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/pv/ro-page-fault.c:125:5: warning[deadcode.DeadStores]: Value stored to 'page' is never read # 123| pte = ptwr_ctxt->pte; # 124| mfn = l1e_get_mfn(pte); # 125|-> page = mfn_to_page(mfn); # 126| # 127| /* We are looking only for read-only mappings of p.t. pages. */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:119:15: warning[deadcode.DeadStores]: Although the value stored to 'val' is used in the enclosing expression, the value is never actually read from 'val' # 117| ss = strchr(s, '\0'); # 118| # 119|-> if ( (val = parse_boolean("shstk", s, ss)) >= 0 ) # 120| { # 121| #ifdef CONFIG_XEN_SHSTK Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:127:20: warning[deadcode.DeadStores]: Although the value stored to 'val' is used in the enclosing expression, the value is never actually read from 'val' # 125| #endif # 126| } # 127|-> else if ( (val = parse_boolean("ibt", s, ss)) >= 0 ) # 128| { # 129| #ifdef CONFIG_XEN_IBT Error: GCC_ANALYZER_WARNING (CWE-127): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c: scope_hint: In function ‘__start_xen’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1545:41: warning[-Wanalyzer-out-of-bounds]: buffer under-read xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:2: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:836:21: note: in expansion of macro ‘strstr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1033:20: note: in expansion of macro ‘strstr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/grant_table.h:27: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1277:31: note: in expansion of macro ‘cpu_has_xen_ibt’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c: scope_hint: In function ‘__start_xen’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/page.h:208:8: note: in definition of macro ‘l1_table_offset’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c: scope_hint: In function ‘__start_xen’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/x86_64/page.h:24: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/page.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/pdx.h:215:24: note: in definition of macro ‘pfn_to_pdx’ # └────────────────────────────┘ # ^ # 1543| ASSERT(j); # 1544| } # 1545|-> map_e = boot_e820.map[j].addr + boot_e820.map[j].size; # 1546| for ( j = 0; j < mbi->mods_count; ++j ) # 1547| { Error: GCC_ANALYZER_WARNING (CWE-127): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1545:65: warning[-Wanalyzer-out-of-bounds]: buffer under-read xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:836:21: note: in expansion of macro ‘strstr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1033:20: note: in expansion of macro ‘strstr’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c:1277:31: note: in expansion of macro ‘cpu_has_xen_ibt’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c: scope_hint: In function ‘__start_xen’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/page.h:208:8: note: in definition of macro ‘l1_table_offset’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/setup.c: scope_hint: In function ‘__start_xen’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pdx.h:215:24: note: in definition of macro ‘pfn_to_pdx’ # └────────────────────────────┘ # ^ # 1543| ASSERT(j); # 1544| } # 1545|-> map_e = boot_e820.map[j].addr + boot_e820.map[j].size; # 1546| for ( j = 0; j < mbi->mods_count; ++j ) # 1547| { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/smpboot.c:1082:11: warning[deadcode.DeadStores]: Value stored to 'stub_page' is never read # 1080| disable_each_ist(idt_tables[cpu]); # 1081| # 1082|-> for ( stub_page = 0, i = cpu & ~(STUBS_PER_PAGE - 1); # 1083| i < nr_cpu_ids && i <= (cpu | (STUBS_PER_PAGE - 1)); ++i ) # 1084| if ( cpu_online(i) && cpu_to_node(i) == node ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c:297:5: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 295| { # 296| uint64_t tsc_prev = *tsc = rdtsc_ordered(), tsc_min = ~0; # 297|-> uint32_t best = best; # 298| unsigned int i; # 299| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c: scope_hint: In function ‘read_pt_and_tsc’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c:318:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘best’ # 316| } # 317| # 318|-> return best; # 319| } # 320| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c:1022:5: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 1020| { # 1021| uint32_t tmcct_prev = *tmcct = apic_tmcct_read(), tmcct_min = ~0; # 1022|-> uint64_t best = best; # 1023| unsigned int i; # 1024| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c: scope_hint: In function ‘read_pt_and_tmcct’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c:1043:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘best’ # 1041| } # 1042| # 1043|-> return best; # 1044| } # 1045| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/time.c:1866:5: warning[deadcode.DeadStores]: Value stored to 'now' is never read # 1864| /* The measurement runs for 20 msecs: */ # 1865| end = start + tsc_khz * 20ULL; # 1866|-> now = start; # 1867| # 1868| for ( i = 0; ; i++ ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/traps.c:1509:5: warning[deadcode.DeadStores]: Value stored to 'mfn' is never read # 1507| l1t = map_domain_page(_mfn(mfn)); # 1508| l1e = l1e_read_atomic(&l1t[l1_table_offset(addr)]); # 1509|-> mfn = l1e_get_pfn(l1e); # 1510| unmap_domain_page(l1t); # 1511| if ( ((l1e_get_flags(l1e) & required_flags) != required_flags) || Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c: scope_hint: Assembler messages xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:30: Error: bad expression # 28| { # 29| OFFSET(UREGS_r15, struct cpu_user_regs, r15); # 30|-> OFFSET(UREGS_r14, struct cpu_user_regs, r14); # 31| OFFSET(UREGS_r13, struct cpu_user_regs, r13); # 32| OFFSET(UREGS_r12, struct cpu_user_regs, r12); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:30: Error: junk at end of line, first unrecognized character is `#' # 28| { # 29| OFFSET(UREGS_r15, struct cpu_user_regs, r15); # 30|-> OFFSET(UREGS_r14, struct cpu_user_regs, r14); # 31| OFFSET(UREGS_r13, struct cpu_user_regs, r13); # 32| OFFSET(UREGS_r12, struct cpu_user_regs, r12); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:31: Error: symbol `.ascii' is already defined # 29| OFFSET(UREGS_r15, struct cpu_user_regs, r15); # 30| OFFSET(UREGS_r14, struct cpu_user_regs, r14); # 31|-> OFFSET(UREGS_r13, struct cpu_user_regs, r13); # 32| OFFSET(UREGS_r12, struct cpu_user_regs, r12); # 33| OFFSET(UREGS_rbp, struct cpu_user_regs, rbp); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:32: Error: symbol `.ascii' is already defined # 30| OFFSET(UREGS_r14, struct cpu_user_regs, r14); # 31| OFFSET(UREGS_r13, struct cpu_user_regs, r13); # 32|-> OFFSET(UREGS_r12, struct cpu_user_regs, r12); # 33| OFFSET(UREGS_rbp, struct cpu_user_regs, rbp); # 34| OFFSET(UREGS_rbx, struct cpu_user_regs, rbx); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:33: Error: symbol `.ascii' is already defined # 31| OFFSET(UREGS_r13, struct cpu_user_regs, r13); # 32| OFFSET(UREGS_r12, struct cpu_user_regs, r12); # 33|-> OFFSET(UREGS_rbp, struct cpu_user_regs, rbp); # 34| OFFSET(UREGS_rbx, struct cpu_user_regs, rbx); # 35| OFFSET(UREGS_r11, struct cpu_user_regs, r11); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:34: Error: symbol `.ascii' is already defined # 32| OFFSET(UREGS_r12, struct cpu_user_regs, r12); # 33| OFFSET(UREGS_rbp, struct cpu_user_regs, rbp); # 34|-> OFFSET(UREGS_rbx, struct cpu_user_regs, rbx); # 35| OFFSET(UREGS_r11, struct cpu_user_regs, r11); # 36| OFFSET(UREGS_r10, struct cpu_user_regs, r10); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:35: Error: symbol `.ascii' is already defined # 33| OFFSET(UREGS_rbp, struct cpu_user_regs, rbp); # 34| OFFSET(UREGS_rbx, struct cpu_user_regs, rbx); # 35|-> OFFSET(UREGS_r11, struct cpu_user_regs, r11); # 36| OFFSET(UREGS_r10, struct cpu_user_regs, r10); # 37| OFFSET(UREGS_r9, struct cpu_user_regs, r9); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:36: Error: symbol `.ascii' is already defined # 34| OFFSET(UREGS_rbx, struct cpu_user_regs, rbx); # 35| OFFSET(UREGS_r11, struct cpu_user_regs, r11); # 36|-> OFFSET(UREGS_r10, struct cpu_user_regs, r10); # 37| OFFSET(UREGS_r9, struct cpu_user_regs, r9); # 38| OFFSET(UREGS_r8, struct cpu_user_regs, r8); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:37: Error: symbol `.ascii' is already defined # 35| OFFSET(UREGS_r11, struct cpu_user_regs, r11); # 36| OFFSET(UREGS_r10, struct cpu_user_regs, r10); # 37|-> OFFSET(UREGS_r9, struct cpu_user_regs, r9); # 38| OFFSET(UREGS_r8, struct cpu_user_regs, r8); # 39| OFFSET(UREGS_rax, struct cpu_user_regs, rax); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:38: Error: symbol `.ascii' is already defined # 36| OFFSET(UREGS_r10, struct cpu_user_regs, r10); # 37| OFFSET(UREGS_r9, struct cpu_user_regs, r9); # 38|-> OFFSET(UREGS_r8, struct cpu_user_regs, r8); # 39| OFFSET(UREGS_rax, struct cpu_user_regs, rax); # 40| OFFSET(UREGS_rcx, struct cpu_user_regs, rcx); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:39: Error: symbol `.ascii' is already defined # 37| OFFSET(UREGS_r9, struct cpu_user_regs, r9); # 38| OFFSET(UREGS_r8, struct cpu_user_regs, r8); # 39|-> OFFSET(UREGS_rax, struct cpu_user_regs, rax); # 40| OFFSET(UREGS_rcx, struct cpu_user_regs, rcx); # 41| OFFSET(UREGS_rdx, struct cpu_user_regs, rdx); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:40: Error: symbol `.ascii' is already defined # 38| OFFSET(UREGS_r8, struct cpu_user_regs, r8); # 39| OFFSET(UREGS_rax, struct cpu_user_regs, rax); # 40|-> OFFSET(UREGS_rcx, struct cpu_user_regs, rcx); # 41| OFFSET(UREGS_rdx, struct cpu_user_regs, rdx); # 42| OFFSET(UREGS_rsi, struct cpu_user_regs, rsi); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:41: Error: symbol `.ascii' is already defined # 39| OFFSET(UREGS_rax, struct cpu_user_regs, rax); # 40| OFFSET(UREGS_rcx, struct cpu_user_regs, rcx); # 41|-> OFFSET(UREGS_rdx, struct cpu_user_regs, rdx); # 42| OFFSET(UREGS_rsi, struct cpu_user_regs, rsi); # 43| OFFSET(UREGS_rdi, struct cpu_user_regs, rdi); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:42: Error: symbol `.ascii' is already defined # 40| OFFSET(UREGS_rcx, struct cpu_user_regs, rcx); # 41| OFFSET(UREGS_rdx, struct cpu_user_regs, rdx); # 42|-> OFFSET(UREGS_rsi, struct cpu_user_regs, rsi); # 43| OFFSET(UREGS_rdi, struct cpu_user_regs, rdi); # 44| OFFSET(UREGS_error_code, struct cpu_user_regs, error_code); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:43: Error: symbol `.ascii' is already defined # 41| OFFSET(UREGS_rdx, struct cpu_user_regs, rdx); # 42| OFFSET(UREGS_rsi, struct cpu_user_regs, rsi); # 43|-> OFFSET(UREGS_rdi, struct cpu_user_regs, rdi); # 44| OFFSET(UREGS_error_code, struct cpu_user_regs, error_code); # 45| OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:44: Error: symbol `.ascii' is already defined # 42| OFFSET(UREGS_rsi, struct cpu_user_regs, rsi); # 43| OFFSET(UREGS_rdi, struct cpu_user_regs, rdi); # 44|-> OFFSET(UREGS_error_code, struct cpu_user_regs, error_code); # 45| OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector); # 46| OFFSET(UREGS_rip, struct cpu_user_regs, rip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:45: Error: symbol `.ascii' is already defined # 43| OFFSET(UREGS_rdi, struct cpu_user_regs, rdi); # 44| OFFSET(UREGS_error_code, struct cpu_user_regs, error_code); # 45|-> OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector); # 46| OFFSET(UREGS_rip, struct cpu_user_regs, rip); # 47| OFFSET(UREGS_cs, struct cpu_user_regs, cs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:46: Error: symbol `.ascii' is already defined # 44| OFFSET(UREGS_error_code, struct cpu_user_regs, error_code); # 45| OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector); # 46|-> OFFSET(UREGS_rip, struct cpu_user_regs, rip); # 47| OFFSET(UREGS_cs, struct cpu_user_regs, cs); # 48| OFFSET(UREGS_eflags, struct cpu_user_regs, rflags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:47: Error: symbol `.ascii' is already defined # 45| OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector); # 46| OFFSET(UREGS_rip, struct cpu_user_regs, rip); # 47|-> OFFSET(UREGS_cs, struct cpu_user_regs, cs); # 48| OFFSET(UREGS_eflags, struct cpu_user_regs, rflags); # 49| OFFSET(UREGS_rsp, struct cpu_user_regs, rsp); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:48: Error: symbol `.ascii' is already defined # 46| OFFSET(UREGS_rip, struct cpu_user_regs, rip); # 47| OFFSET(UREGS_cs, struct cpu_user_regs, cs); # 48|-> OFFSET(UREGS_eflags, struct cpu_user_regs, rflags); # 49| OFFSET(UREGS_rsp, struct cpu_user_regs, rsp); # 50| OFFSET(UREGS_ss, struct cpu_user_regs, ss); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:49: Error: symbol `.ascii' is already defined # 47| OFFSET(UREGS_cs, struct cpu_user_regs, cs); # 48| OFFSET(UREGS_eflags, struct cpu_user_regs, rflags); # 49|-> OFFSET(UREGS_rsp, struct cpu_user_regs, rsp); # 50| OFFSET(UREGS_ss, struct cpu_user_regs, ss); # 51| OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:50: Error: symbol `.ascii' is already defined # 48| OFFSET(UREGS_eflags, struct cpu_user_regs, rflags); # 49| OFFSET(UREGS_rsp, struct cpu_user_regs, rsp); # 50|-> OFFSET(UREGS_ss, struct cpu_user_regs, ss); # 51| OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es); # 52| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:51: Error: symbol `.ascii' is already defined # 49| OFFSET(UREGS_rsp, struct cpu_user_regs, rsp); # 50| OFFSET(UREGS_ss, struct cpu_user_regs, ss); # 51|-> OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es); # 52| BLANK(); # 53| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:52: Error: symbol `.ascii' is already defined # 50| OFFSET(UREGS_ss, struct cpu_user_regs, ss); # 51| OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es); # 52|-> BLANK(); # 53| # 54| /* Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:53: Error: symbol `.ascii' is already defined # 51| OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es); # 52| BLANK(); # 53|-> # 54| /* # 55| * EFRAME_* is for the entry/exit logic where %rsp is pointing at Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:63: Error: symbol `.ascii' is already defined # 61| # 62| OFFSET_EF(EFRAME_entry_vector, entry_vector); # 63|-> OFFSET_EF(EFRAME_rip, rip); # 64| OFFSET_EF(EFRAME_cs, cs); # 65| OFFSET_EF(EFRAME_eflags, eflags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:64: Error: symbol `.ascii' is already defined # 62| OFFSET_EF(EFRAME_entry_vector, entry_vector); # 63| OFFSET_EF(EFRAME_rip, rip); # 64|-> OFFSET_EF(EFRAME_cs, cs); # 65| OFFSET_EF(EFRAME_eflags, eflags); # 66| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:65: Error: symbol `.ascii' is already defined # 63| OFFSET_EF(EFRAME_rip, rip); # 64| OFFSET_EF(EFRAME_cs, cs); # 65|-> OFFSET_EF(EFRAME_eflags, eflags); # 66| # 67| /* Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:66: Error: symbol `.ascii' is already defined # 64| OFFSET_EF(EFRAME_cs, cs); # 65| OFFSET_EF(EFRAME_eflags, eflags); # 66|-> # 67| /* # 68| * These aren't real fields. They're spare space, used by the IST Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:72: Error: symbol `.ascii' is already defined # 70| */ # 71| OFFSET_EF(EFRAME_shadow_scf, eflags, +4); # 72|-> OFFSET_EF(EFRAME_shadow_sel, eflags, +6); # 73| # 74| OFFSET_EF(EFRAME_rsp, rsp); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:73: Error: symbol `.ascii' is already defined # 71| OFFSET_EF(EFRAME_shadow_scf, eflags, +4); # 72| OFFSET_EF(EFRAME_shadow_sel, eflags, +6); # 73|-> # 74| OFFSET_EF(EFRAME_rsp, rsp); # 75| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:75: Error: symbol `.ascii' is already defined # 73| # 74| OFFSET_EF(EFRAME_rsp, rsp); # 75|-> BLANK(); # 76| # 77| #undef OFFSET_EF Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:76: Error: symbol `.ascii' is already defined # 74| OFFSET_EF(EFRAME_rsp, rsp); # 75| BLANK(); # 76|-> # 77| #undef OFFSET_EF # 78| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:80: Error: symbol `.ascii' is already defined # 78| # 79| OFFSET(VCPU_processor, struct vcpu, processor); # 80|-> OFFSET(VCPU_domain, struct vcpu, domain); # 81| OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map); # 82| OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:81: Error: symbol `.ascii' is already defined # 79| OFFSET(VCPU_processor, struct vcpu, processor); # 80| OFFSET(VCPU_domain, struct vcpu, domain); # 81|-> OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map); # 82| OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce); # 83| OFFSET(VCPU_thread_flags, struct vcpu, arch.flags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:82: Error: symbol `.ascii' is already defined # 80| OFFSET(VCPU_domain, struct vcpu, domain); # 81| OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map); # 82|-> OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce); # 83| OFFSET(VCPU_thread_flags, struct vcpu, arch.flags); # 84| OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:83: Error: symbol `.ascii' is already defined # 81| OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map); # 82| OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce); # 83|-> OFFSET(VCPU_thread_flags, struct vcpu, arch.flags); # 84| OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip); # 85| OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:84: Error: symbol `.ascii' is already defined # 82| OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce); # 83| OFFSET(VCPU_thread_flags, struct vcpu, arch.flags); # 84|-> OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip); # 85| OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs); # 86| OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:85: Error: symbol `.ascii' is already defined # 83| OFFSET(VCPU_thread_flags, struct vcpu, arch.flags); # 84| OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip); # 85|-> OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs); # 86| OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip); # 87| OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:86: Error: symbol `.ascii' is already defined # 84| OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip); # 85| OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs); # 86|-> OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip); # 87| OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip); # 88| OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:87: Error: symbol `.ascii' is already defined # 85| OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs); # 86| OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip); # 87|-> OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip); # 88| OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs); # 89| OFFSET(VCPU_syscall32_disables_events, Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:88: Error: symbol `.ascii' is already defined # 86| OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip); # 87| OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip); # 88|-> OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs); # 89| OFFSET(VCPU_syscall32_disables_events, # 90| struct vcpu, arch.pv.syscall32_disables_events); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:89: Error: symbol `.ascii' is already defined # 87| OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip); # 88| OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs); # 89|-> OFFSET(VCPU_syscall32_disables_events, # 90| struct vcpu, arch.pv.syscall32_disables_events); # 91| OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:90: Error: symbol `.ascii' is already defined # 88| OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs); # 89| OFFSET(VCPU_syscall32_disables_events, # 90|-> struct vcpu, arch.pv.syscall32_disables_events); # 91| OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip); # 92| OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:92: Error: symbol `.ascii' is already defined # 90| struct vcpu, arch.pv.syscall32_disables_events); # 91| OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip); # 92|-> OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs); # 93| OFFSET(VCPU_sysenter_disables_events, # 94| struct vcpu, arch.pv.sysenter_disables_events); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:93: Error: symbol `.ascii' is already defined # 91| OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip); # 92| OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs); # 93|-> OFFSET(VCPU_sysenter_disables_events, # 94| struct vcpu, arch.pv.sysenter_disables_events); # 95| OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:94: Error: symbol `.ascii' is already defined # 92| OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs); # 93| OFFSET(VCPU_sysenter_disables_events, # 94|-> struct vcpu, arch.pv.sysenter_disables_events); # 95| OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt); # 96| OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:96: Error: symbol `.ascii' is already defined # 94| struct vcpu, arch.pv.sysenter_disables_events); # 95| OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt); # 96|-> OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp); # 97| OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss); # 98| OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:97: Error: symbol `.ascii' is already defined # 95| OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt); # 96| OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp); # 97|-> OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss); # 98| OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl); # 99| OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:98: Error: symbol `.ascii' is already defined # 96| OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp); # 97| OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss); # 98|-> OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl); # 99| OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags); # 100| OFFSET(VCPU_cr3, struct vcpu, arch.cr3); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:99: Error: symbol `.ascii' is already defined # 97| OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss); # 98| OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl); # 99|-> OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags); # 100| OFFSET(VCPU_cr3, struct vcpu, arch.cr3); # 101| OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:100: Error: symbol `.ascii' is already defined # 98| OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl); # 99| OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags); # 100|-> OFFSET(VCPU_cr3, struct vcpu, arch.cr3); # 101| OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs); # 102| OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:101: Error: symbol `.ascii' is already defined # 99| OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags); # 100| OFFSET(VCPU_cr3, struct vcpu, arch.cr3); # 101|-> OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs); # 102| OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending); # 103| OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:102: Error: symbol `.ascii' is already defined # 100| OFFSET(VCPU_cr3, struct vcpu, arch.cr3); # 101| OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs); # 102|-> OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending); # 103| OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending); # 104| OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:103: Error: symbol `.ascii' is already defined # 101| OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs); # 102| OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending); # 103|-> OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending); # 104| OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask); # 105| OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:104: Error: symbol `.ascii' is already defined # 102| OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending); # 103| OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending); # 104|-> OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask); # 105| OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask); # 106| OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:105: Error: symbol `.ascii' is already defined # 103| OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending); # 104| OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask); # 105|-> OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask); # 106| OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask); # 107| DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:106: Error: symbol `.ascii' is already defined # 104| OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask); # 105| OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask); # 106|-> OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask); # 107| DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI); # 108| DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:107: Error: symbol `.ascii' is already defined # 105| OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask); # 106| OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask); # 107|-> DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI); # 108| DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE); # 109| DEFINE(_VGCF_syscall_disables_events, _VGCF_syscall_disables_events); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:108: Error: symbol `.ascii' is already defined # 106| OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask); # 107| DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI); # 108|-> DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE); # 109| DEFINE(_VGCF_syscall_disables_events, _VGCF_syscall_disables_events); # 110| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:109: Error: symbol `.ascii' is already defined # 107| DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI); # 108| DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE); # 109|-> DEFINE(_VGCF_syscall_disables_events, _VGCF_syscall_disables_events); # 110| BLANK(); # 111| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:110: Error: symbol `.ascii' is already defined # 108| DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE); # 109| DEFINE(_VGCF_syscall_disables_events, _VGCF_syscall_disables_events); # 110|-> BLANK(); # 111| # 112| #ifdef CONFIG_HVM Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:111: Error: symbol `.ascii' is already defined # 109| DEFINE(_VGCF_syscall_disables_events, _VGCF_syscall_disables_events); # 110| BLANK(); # 111|-> # 112| #ifdef CONFIG_HVM # 113| OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:114: Error: symbol `.ascii' is already defined # 112| #ifdef CONFIG_HVM # 113| OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa); # 114|-> OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb); # 115| BLANK(); # 116| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:115: Error: symbol `.ascii' is already defined # 113| OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa); # 114| OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb); # 115|-> BLANK(); # 116| # 117| OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:116: Error: symbol `.ascii' is already defined # 114| OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb); # 115| BLANK(); # 116|-> # 117| OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched); # 118| OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:118: Error: symbol `.ascii' is already defined # 116| # 117| OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched); # 118|-> OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode); # 119| OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate); # 120| OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:119: Error: symbol `.ascii' is already defined # 117| OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched); # 118| OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode); # 119|-> OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate); # 120| OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask); # 121| OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:120: Error: symbol `.ascii' is already defined # 118| OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode); # 119| OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate); # 120|-> OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask); # 121| OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]); # 122| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:121: Error: symbol `.ascii' is already defined # 119| OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate); # 120| OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask); # 121|-> OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]); # 122| BLANK(); # 123| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:122: Error: symbol `.ascii' is already defined # 120| OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask); # 121| OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]); # 122|-> BLANK(); # 123| # 124| OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:123: Error: symbol `.ascii' is already defined # 121| OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]); # 122| BLANK(); # 123|-> # 124| OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode); # 125| OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:125: Error: symbol `.ascii' is already defined # 123| # 124| OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode); # 125|-> OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m); # 126| OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled); # 127| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:126: Error: symbol `.ascii' is already defined # 124| OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode); # 125| OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m); # 126|-> OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled); # 127| BLANK(); # 128| #endif Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:127: Error: symbol `.ascii' is already defined # 125| OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m); # 126| OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled); # 127|-> BLANK(); # 128| #endif # 129| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:128: Error: symbol `.ascii' is already defined # 126| OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled); # 127| BLANK(); # 128|-> #endif # 129| # 130| #ifdef CONFIG_PV32 Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:132: Error: symbol `.ascii' is already defined # 130| #ifdef CONFIG_PV32 # 131| OFFSET(DOMAIN_is_32bit_pv, struct domain, arch.pv.is_32bit); # 132|-> BLANK(); # 133| # 134| OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:133: Error: symbol `.ascii' is already defined # 131| OFFSET(DOMAIN_is_32bit_pv, struct domain, arch.pv.is_32bit); # 132| BLANK(); # 133|-> # 134| OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending); # 135| OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:135: Error: symbol `.ascii' is already defined # 133| # 134| OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending); # 135|-> OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask); # 136| BLANK(); # 137| #endif Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:136: Error: symbol `.ascii' is already defined # 134| OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending); # 135| OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask); # 136|-> BLANK(); # 137| #endif # 138| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:137: Error: symbol `.ascii' is already defined # 135| OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask); # 136| BLANK(); # 137|-> #endif # 138| # 139| #ifdef CONFIG_PV Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:141: Error: symbol `.ascii' is already defined # 139| #ifdef CONFIG_PV # 140| OFFSET(VCPUINFO_upcall_pending, struct vcpu_info, evtchn_upcall_pending); # 141|-> OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask); # 142| BLANK(); # 143| #endif Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:142: Error: symbol `.ascii' is already defined # 140| OFFSET(VCPUINFO_upcall_pending, struct vcpu_info, evtchn_upcall_pending); # 141| OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask); # 142|-> BLANK(); # 143| #endif # 144| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:143: Error: symbol `.ascii' is already defined # 141| OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask); # 142| BLANK(); # 143|-> #endif # 144| # 145| OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:146: Error: symbol `.ascii' is already defined # 144| # 145| OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs); # 146|-> OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code); # 147| OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip); # 148| OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:147: Error: symbol `.ascii' is already defined # 145| OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs); # 146| OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code); # 147|-> OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip); # 148| OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel); # 149| OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:148: Error: symbol `.ascii' is already defined # 146| OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code); # 147| OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip); # 148|-> OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel); # 149| OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu); # 150| OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:149: Error: symbol `.ascii' is already defined # 147| OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip); # 148| OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel); # 149|-> OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu); # 150| OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset); # 151| OFFSET(CPUINFO_cr4, struct cpu_info, cr4); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:150: Error: symbol `.ascii' is already defined # 148| OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel); # 149| OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu); # 150|-> OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset); # 151| OFFSET(CPUINFO_cr4, struct cpu_info, cr4); # 152| OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:151: Error: symbol `.ascii' is already defined # 149| OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu); # 150| OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset); # 151|-> OFFSET(CPUINFO_cr4, struct cpu_info, cr4); # 152| OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3); # 153| OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:152: Error: symbol `.ascii' is already defined # 150| OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset); # 151| OFFSET(CPUINFO_cr4, struct cpu_info, cr4); # 152|-> OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3); # 153| OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3); # 154| OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:153: Error: symbol `.ascii' is already defined # 151| OFFSET(CPUINFO_cr4, struct cpu_info, cr4); # 152| OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3); # 153|-> OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3); # 154| OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl); # 155| OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:154: Error: symbol `.ascii' is already defined # 152| OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3); # 153| OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3); # 154|-> OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl); # 155| OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl); # 156| OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:155: Error: symbol `.ascii' is already defined # 153| OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3); # 154| OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl); # 155|-> OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl); # 156| OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl); # 157| OFFSET(CPUINFO_spec_ctrl_flags, struct cpu_info, spec_ctrl_flags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:156: Error: symbol `.ascii' is already defined # 154| OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl); # 155| OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl); # 156|-> OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl); # 157| OFFSET(CPUINFO_spec_ctrl_flags, struct cpu_info, spec_ctrl_flags); # 158| OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:157: Error: symbol `.ascii' is already defined # 155| OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl); # 156| OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl); # 157|-> OFFSET(CPUINFO_spec_ctrl_flags, struct cpu_info, spec_ctrl_flags); # 158| OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed); # 159| OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:158: Error: symbol `.ascii' is already defined # 156| OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl); # 157| OFFSET(CPUINFO_spec_ctrl_flags, struct cpu_info, spec_ctrl_flags); # 158|-> OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed); # 159| OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3); # 160| DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info)); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:159: Error: symbol `.ascii' is already defined # 157| OFFSET(CPUINFO_spec_ctrl_flags, struct cpu_info, spec_ctrl_flags); # 158| OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed); # 159|-> OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3); # 160| DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info)); # 161| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:160: Error: symbol `.ascii' is already defined # 158| OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed); # 159| OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3); # 160|-> DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info)); # 161| BLANK(); # 162| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:161: Error: symbol `.ascii' is already defined # 159| OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3); # 160| DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info)); # 161|-> BLANK(); # 162| # 163| #ifdef CONFIG_PV Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:162: Error: symbol `.ascii' is already defined # 160| DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info)); # 161| BLANK(); # 162|-> # 163| #ifdef CONFIG_PV # 164| OFFSET(TRAPINFO_eip, struct trap_info, address); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:165: Error: symbol `.ascii' is already defined # 163| #ifdef CONFIG_PV # 164| OFFSET(TRAPINFO_eip, struct trap_info, address); # 165|-> OFFSET(TRAPINFO_cs, struct trap_info, cs); # 166| OFFSET(TRAPINFO_flags, struct trap_info, flags); # 167| DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info)); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:166: Error: symbol `.ascii' is already defined # 164| OFFSET(TRAPINFO_eip, struct trap_info, address); # 165| OFFSET(TRAPINFO_cs, struct trap_info, cs); # 166|-> OFFSET(TRAPINFO_flags, struct trap_info, flags); # 167| DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info)); # 168| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:167: Error: symbol `.ascii' is already defined # 165| OFFSET(TRAPINFO_cs, struct trap_info, cs); # 166| OFFSET(TRAPINFO_flags, struct trap_info, flags); # 167|-> DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info)); # 168| BLANK(); # 169| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:168: Error: symbol `.ascii' is already defined # 166| OFFSET(TRAPINFO_flags, struct trap_info, flags); # 167| DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info)); # 168|-> BLANK(); # 169| # 170| OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:169: Error: symbol `.ascii' is already defined # 167| DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info)); # 168| BLANK(); # 169|-> # 170| OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code); # 171| OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:171: Error: symbol `.ascii' is already defined # 169| # 170| OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code); # 171|-> OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags); # 172| OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs); # 173| OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:172: Error: symbol `.ascii' is already defined # 170| OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code); # 171| OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags); # 172|-> OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs); # 173| OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip); # 174| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:173: Error: symbol `.ascii' is already defined # 171| OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags); # 172| OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs); # 173|-> OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip); # 174| BLANK(); # 175| #endif Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:174: Error: symbol `.ascii' is already defined # 172| OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs); # 173| OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip); # 174|-> BLANK(); # 175| #endif # 176| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:175: Error: symbol `.ascii' is already defined # 173| OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip); # 174| BLANK(); # 175|-> #endif # 176| # 177| OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:178: Error: symbol `.ascii' is already defined # 176| # 177| OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw); # 178|-> BLANK(); # 179| # 180| #ifdef CONFIG_PERF_COUNTERS Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:179: Error: symbol `.ascii' is already defined # 177| OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw); # 178| BLANK(); # 179|-> # 180| #ifdef CONFIG_PERF_COUNTERS # 181| DEFINE(ASM_PERFC_exceptions, PERFC_exceptions); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:186: Error: symbol `.ascii' is already defined # 184| # 185| DEFINE(IRQSTAT_shift, ilog2(sizeof(irq_cpustat_t))); # 186|-> OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending); # 187| BLANK(); # 188| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:187: Error: symbol `.ascii' is already defined # 185| DEFINE(IRQSTAT_shift, ilog2(sizeof(irq_cpustat_t))); # 186| OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending); # 187|-> BLANK(); # 188| # 189| OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:188: Error: symbol `.ascii' is already defined # 186| OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending); # 187| BLANK(); # 188|-> # 189| OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability); # 190| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:190: Error: symbol `.ascii' is already defined # 188| # 189| OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability); # 190|-> BLANK(); # 191| # 192| OFFSET(MB_flags, multiboot_info_t, flags); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:191: Error: symbol `.ascii' is already defined # 189| OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability); # 190| BLANK(); # 191|-> # 192| OFFSET(MB_flags, multiboot_info_t, flags); # 193| OFFSET(MB_cmdline, multiboot_info_t, cmdline); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:193: Error: symbol `.ascii' is already defined # 191| # 192| OFFSET(MB_flags, multiboot_info_t, flags); # 193|-> OFFSET(MB_cmdline, multiboot_info_t, cmdline); # 194| OFFSET(MB_mem_lower, multiboot_info_t, mem_lower); # 195| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:194: Error: symbol `.ascii' is already defined # 192| OFFSET(MB_flags, multiboot_info_t, flags); # 193| OFFSET(MB_cmdline, multiboot_info_t, cmdline); # 194|-> OFFSET(MB_mem_lower, multiboot_info_t, mem_lower); # 195| BLANK(); # 196| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:195: Error: symbol `.ascii' is already defined # 193| OFFSET(MB_cmdline, multiboot_info_t, cmdline); # 194| OFFSET(MB_mem_lower, multiboot_info_t, mem_lower); # 195|-> BLANK(); # 196| # 197| DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t)); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:196: Error: symbol `.ascii' is already defined # 194| OFFSET(MB_mem_lower, multiboot_info_t, mem_lower); # 195| BLANK(); # 196|-> # 197| DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t)); # 198| OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:198: Error: symbol `.ascii' is already defined # 196| # 197| DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t)); # 198|-> OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size); # 199| OFFSET(MB2_tag_type, multiboot2_tag_t, type); # 200| OFFSET(MB2_tag_size, multiboot2_tag_t, size); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:199: Error: symbol `.ascii' is already defined # 197| DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t)); # 198| OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size); # 199|-> OFFSET(MB2_tag_type, multiboot2_tag_t, type); # 200| OFFSET(MB2_tag_size, multiboot2_tag_t, size); # 201| OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:200: Error: symbol `.ascii' is already defined # 198| OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size); # 199| OFFSET(MB2_tag_type, multiboot2_tag_t, type); # 200|-> OFFSET(MB2_tag_size, multiboot2_tag_t, size); # 201| OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr); # 202| OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:201: Error: symbol `.ascii' is already defined # 199| OFFSET(MB2_tag_type, multiboot2_tag_t, type); # 200| OFFSET(MB2_tag_size, multiboot2_tag_t, size); # 201|-> OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr); # 202| OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower); # 203| OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:202: Error: symbol `.ascii' is already defined # 200| OFFSET(MB2_tag_size, multiboot2_tag_t, size); # 201| OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr); # 202|-> OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower); # 203| OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer); # 204| OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:203: Error: symbol `.ascii' is already defined # 201| OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr); # 202| OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower); # 203|-> OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer); # 204| OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer); # 205| OFFSET(MB2_tag_string, multiboot2_tag_string_t, string); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:204: Error: symbol `.ascii' is already defined # 202| OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower); # 203| OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer); # 204|-> OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer); # 205| OFFSET(MB2_tag_string, multiboot2_tag_string_t, string); # 206| BLANK(); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:205: Error: symbol `.ascii' is already defined # 203| OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer); # 204| OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer); # 205|-> OFFSET(MB2_tag_string, multiboot2_tag_string_t, string); # 206| BLANK(); # 207| Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:206: Error: symbol `.ascii' is already defined # 204| OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer); # 205| OFFSET(MB2_tag_string, multiboot2_tag_string_t, string); # 206|-> BLANK(); # 207| # 208| OFFSET(DOMAIN_vm_assist, struct domain, vm_assist); Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:207: Error: symbol `.ascii' is already defined # 205| OFFSET(MB2_tag_string, multiboot2_tag_string_t, string); # 206| BLANK(); # 207|-> # 208| OFFSET(DOMAIN_vm_assist, struct domain, vm_assist); # 209| } Error: COMPILER_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:209: Error: symbol `.ascii' is already defined # 207| # 208| OFFSET(DOMAIN_vm_assist, struct domain, vm_assist); # 209|-> } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/mm.c:172:11: warning[deadcode.DeadStores]: Value stored to 'm2p_start_mfn' during its initialization is never read # 170| { # 171| unsigned long i, n, v; # 172|-> mfn_t m2p_start_mfn = INVALID_MFN; # 173| l3_pgentry_t l3e; # 174| l2_pgentry_t l2e; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/mm.c:410:5: warning[deadcode.DeadStores]: Value stored to 'va' is never read # 408| ~((1UL << (L2_PAGETABLE_SHIFT - 3)) -1)); # 409| # 410|-> va = RO_MPT_VIRT_START + smap * sizeof(*machine_to_phys_mapping); # 411| # 412| #define MFN(x) (((x) << L2_PAGETABLE_SHIFT) / sizeof(unsigned long)) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/mm.c:829:5: warning[deadcode.DeadStores]: Value stored to 'nidx' is never read # 827| # 828| eidx = DIV_ROUND_UP(mfn_to_pdx(epfn), PDX_GROUP_COUNT); # 829|-> nidx = cidx = mfn_to_pdx(spfn)/PDX_GROUP_COUNT; # 830| # 831| ASSERT( mfn_to_pdx(epfn) <= (DIRECTMAP_SIZE >> PAGE_SHIFT) && Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:376:5: warning[deadcode.DeadStores]: Value stored to 'offset' is never read # 374| /* Trampoline for SYSCALL entry from compatibility mode. */ # 375| wrmsrl(MSR_CSTAR, stub_va); # 376|-> offset += write_stub_trampoline(stub_page + (stub_va & ~PAGE_MASK), # 377| stub_va, stack_bottom, # 378| (unsigned long)cstar_enter); Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/0f01.c:294: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 292| &base, mode_64bit() ? 8 : 4, ctxt, ops)) ) # 293| goto done; # 294|-> generate_exception_if(!is_canonical_address(base), X86_EXC_GP, 0); # 295| sreg.base = base; # 296| sreg.limit = limit; Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/0fae.c:193: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 191| { # 192| sreg.base = *dst->reg; # 193|-> generate_exception_if(!is_canonical_address(sreg.base), # 194| X86_EXC_GP, 0); # 195| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/0fc7.c:185:17: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 183| # 184| case X86EMUL_CMPXCHG_FAILED: # 185|-> rc = X86EMUL_OKAY; # 186| goto cmpxchgNb_failed; # 187| Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:990: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 988| if ( (desc_hi.b & 0x00001f00) || # 989| (seg != x86_seg_none && # 990|-> !is_canonical_address((uint64_t)desc_hi.a << 32)) ) # 991| goto raise_exn; # 992| } Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:2027: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 2025| if ( (rc = ops->read_segment(x86_seg_cs, &sreg, ctxt)) || # 2026| (rc = load_seg(x86_seg_cs, imm2, 0, &cs, ctxt, ops)) || # 2027|-> (validate_far_branch(&cs, imm1), # 2028| src.val = sreg.sel, # 2029| rc = ops->write(x86_seg_ss, sp_pre_dec(op_bytes), Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:2357: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 2355| &src.val, op_bytes, ctxt, ops)) || # 2356| (rc = load_seg(x86_seg_cs, src.val, 1, &cs, ctxt, ops)) || # 2357|-> (rc = commit_far_branch(&cs, dst.val)) ) # 2358| goto done; # 2359| break; Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:2413: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 2411| _regs.eflags |= (eflags & ~mask) | X86_EFLAGS_MBS; # 2412| if ( (rc = load_seg(x86_seg_cs, sel, 1, &cs, ctxt, ops)) || # 2413|-> (rc = commit_far_branch(&cs, (uint32_t)eip)) ) # 2414| goto done; # 2415| break; Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:2532: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 2530| far_jmp: # 2531| if ( (rc = load_seg(x86_seg_cs, imm2, 0, &cs, ctxt, ops)) || # 2532|-> (rc = commit_far_branch(&cs, imm1)) ) # 2533| goto done; # 2534| break; Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:3077: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 3075| * XSA-7 (CVE-2012-0217). # 3076| */ # 3077|-> generate_exception_if(ctxt->cpuid->x86_vendor == X86_VENDOR_INTEL && # 3078| op_bytes == 8 && !is_canonical_address(_regs.rcx), # 3079| X86_EXC_GP, 0); Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:3874: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 3872| # 3873| generate_exception_if(!(msr_val & 0xfffc), X86_EXC_GP, 0); # 3874|-> generate_exception_if(op_bytes == 8 && # 3875| (!is_canonical_address(_regs.r(dx)) || # 3876| !is_canonical_address(_regs.r(cx))), Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_emulate/x86_emulate.c:6281: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour # 6279| { # 6280| case X86_INVPCID_INDIV_ADDR: # 6281|-> generate_exception_if(!is_canonical_address(mmvalp->xmm[1]), # 6282| X86_EXC_GP, 0); # 6283| /* fall through */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/xstate.c:564:5: warning[deadcode.DeadStores]: Value stored to 'ok' is never read # 562| ASSERT(ok); # 563| size = cpuid_count_ebx(XSTATE_CPUID, 0); # 564|-> ok = set_xcr0(act_xcr0); # 565| ASSERT(ok); # 566| Error: CPPCHECK_WARNING (CWE-758): xen-4.18.1-build/xen-4.18.1/xen/common/bunzip2.c:140: error[shiftTooManyBits]: Shifting 32-bit value by 32 bits is undefined behaviour # 138| /* Calculate result */ # 139| bd->inbufBitCount -= bits_wanted; # 140|-> bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1); # 141| # 142| return bits; Error: GCC_ANALYZER_WARNING (CWE-1335): xen-4.18.1-build/xen-4.18.1/xen/common/bunzip2.c: scope_hint: In function ‘get_bits’ xen-4.18.1-build/xen-4.18.1/xen/common/bunzip2.c:140:58: warning[-Wanalyzer-shift-count-overflow]: shift by count (‘32’) >= precision of type (‘32’) # 138| /* Calculate result */ # 139| bd->inbufBitCount -= bits_wanted; # 140|-> bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1); # 141| # 142| return bits; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_bzip2.c:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/bunzip2.c:666:13: warning[unix.MallocSizeof]: Result of 'malloc' is converted to a pointer of type 'unsigned int', which is incompatible with sizeof operand type 'int' # 664| bd->dbufSize = 100000*(i-BZh0); # 665| # 666|-> bd->dbuf = large_malloc(bd->dbufSize * sizeof(int)); # 667| if (!bd->dbuf) # 668| return RETVAL_OUT_OF_MEMORY; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:665:48: warning[core.NullDereference]: Access to field 'max_vcpus' results in a dereference of a null pointer (loaded from variable 'config') # 663| { # 664| err = -ENOMEM; # 665|-> d->vcpu = xzalloc_array(struct vcpu *, config->max_vcpus); # 666| if ( !d->vcpu ) # 667| goto fail; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domain.c: scope_hint: In function ‘domain_create’ xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:665:54: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/xmalloc.h:36:65: note: in definition of macro ‘xzalloc_array’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/config.h:17: included_from: Included from here. <command-line>: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/trace.h:86:14: note: in expansion of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/trace.h:94:5: note: in expansion of macro ‘TRACE_varD’ xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:624:5: note: in expansion of macro ‘TRACE_1D’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/xmalloc.h:36:65: note: in definition of macro ‘xzalloc_array’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/xmalloc.h:36:65: note: in definition of macro ‘xzalloc_array’ # 663| { # 664| err = -ENOMEM; # 665|-> d->vcpu = xzalloc_array(struct vcpu *, config->max_vcpus); # 666| if ( !d->vcpu ) # 667| goto fail; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:712:52: warning[core.NullDereference]: Access to field 'ssidref' results in a dereference of a null pointer (loaded from variable 'config') # 710| goto fail; # 711| # 712|-> if ( (err = xsm_domain_create(XSM_HOOK, d, config->ssidref)) != 0 ) # 713| goto fail; # 714| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:718:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/trace.h:86:14: note: in expansion of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/trace.h:94:5: note: in expansion of macro ‘TRACE_varD’ xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:624:5: note: in expansion of macro ‘TRACE_1D’ xen-4.18.1-build/xen-4.18.1/xen/common/domain.c: scope_hint: In function ‘domain_create’ xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:701:11: note: in expansion of macro ‘is_idle_domain’ # 716| atomic_inc(&d->pause_count); # 717| # 718|-> if ( (err = evtchn_init(d, config->max_evtchn_port)) != 0 ) # 719| goto fail; # 720| init_status |= INIT_evtchn; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:749:9: warning[deadcode.DeadStores]: Value stored to 'pd' is never read # 747| # 748| spin_lock(&domlist_update_lock); # 749|-> pd = &domain_list; /* NB. domain_list maintained in order of domid. */ # 750| for ( pd = &domain_list; *pd != NULL; pd = &(*pd)->next_in_list ) # 751| if ( (*pd)->domain_id > d->domain_id ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:1857:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 1855| } # 1856| # 1857|-> rc = 0; # 1858| v = d->vcpu[vcpuid]; # 1859| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domain.c:2002:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 2000| struct vcpu_register_runstate_memory_area area; # 2001| # 2002|-> rc = -ENOSYS; # 2003| if ( 0 /* TODO: Dom's XENFEAT_runstate_phys_area setting */ ) # 2004| break; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘getdomaininfo’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:74:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘getdomaininfo’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘getdomaininfo’ # 72| memset(info, 0, sizeof(*info)); # 73| # 74|-> info->domain = d->domain_id; # 75| info->max_vcpu_id = XEN_INVALID_MAX_VCPU_ID; # 76| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘vnuma_init’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:226:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘vnuma_init’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘vnuma_init’ # 224| nr_vnodes = uinfo->nr_vnodes; # 225| # 226|-> if ( uinfo->nr_vcpus != d->max_vcpus || uinfo->pad != 0 ) # 227| return ERR_PTR(ret); # 228| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:344:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 342| ret = -EINVAL; # 343| if ( (d == current->domain) || /* no domain_pause() */ # 344|-> (vcpu >= d->max_vcpus) || ((v = d->vcpu[vcpu]) == NULL) ) # 345| break; # 346| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:458:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 456| ret = -EINVAL; # 457| if ( (d == current->domain) || /* no domain_pause() */ # 458|-> (max != d->max_vcpus) ) /* max_vcpus set up in createdomain */ # 459| break; # 460| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:552:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 550| # 551| ret = -EINVAL; # 552|-> if ( op->u.vcpucontext.vcpu >= d->max_vcpus || # 553| (v = d->vcpu[op->u.vcpucontext.vcpu]) == NULL || # 554| v == current ) /* no vcpu_pause() */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:572:9: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 570| # 571| arch_get_info_guest(v, c); # 572|-> ret = 0; # 573| # 574| vcpu_unpause(v); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:601:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 599| # 600| ret = -EINVAL; # 601|-> if ( op->u.getvcpuinfo.vcpu >= d->max_vcpus ) # 602| break; # 603| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:630:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 628| * the meantime, while tot > max, all new allocations are disallowed. # 629| */ # 630|-> d->max_pages = min(new_max, (uint64_t)(typeof(d->max_pages))-1); # 631| spin_unlock(&d->page_alloc_lock); # 632| break; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:646:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/config.h:17: included_from: Included from here. <command-line>: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:641:28: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 644| { # 645| domain_pause(d); # 646|-> d->debugger_attached = !!op->u.setdebugging.enable; # 647| domain_unpause(d); /* causes guest to latch new status */ # 648| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:766:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 764| # 765| ret = -EINVAL; # 766|-> if ( (d == e) || (d->target != NULL) ) # 767| { # 768| put_domain(e); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:787:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ # 785| # 786| case XEN_DOMCTL_subscribe: # 787|-> d->suspend_evtchn = op->u.subscribe.port; # 788| break; # 789| Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c: scope_hint: In function ‘find_cpio_data’ xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c:123:40: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ch[12]’ xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c:33:23: note: in definition of macro ‘ALIGN’ xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c:123:24: note: in expansion of macro ‘PTR_ALIGN’ xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c:33:23: note: in definition of macro ‘ALIGN’ xen-4.18.1-build/xen-4.18.1/xen/common/earlycpio.c:123:24: note: in expansion of macro ‘PTR_ALIGN’ # 121| len -= cpio_header_len; # 122| # 123|-> dptr = PTR_ALIGN(p + ch[C_NAMESIZE], 4); # 124| nptr = PTR_ALIGN(dptr + ch[C_FILESIZE], 4); # 125| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/event_channel.c:327:5: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 325| } # 326| # 327|-> rc = 0; # 328| # 329| chn = evtchn_from_port(d, port); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/event_channel.c:408:5: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 406| } # 407| # 408|-> rc = 0; # 409| # 410| lchn = evtchn_from_port(ld, lport); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:1672:16: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 1670| # 1671| unmap_common(common); # 1672|-> op->status = common->status; # 1673| } # 1674| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:1738:16: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined # 1736| # 1737| unmap_common(common); # 1738|-> op->status = common->status; # 1739| } # 1740| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:3285:47: warning[core.UndefinedBinaryOperatorResult]: The left operand of '&' is a garbage value # 3283| { # 3284| status_entry(gt, i) = # 3285|-> reserved_entries[i].flags & (GTF_reading | GTF_writing); # 3286| shared_entry_v2(gt, i).hdr.flags = # 3287| reserved_entries[i].flags & ~(GTF_reading | GTF_writing); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:4320:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sha’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:408:5: note: in expansion of macro ‘percpu_read_lock’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:408:5: note: in expansion of macro ‘percpu_read_lock’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:466:12: note: in expansion of macro ‘_active_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ # 4318| if ( gt->gt_version == 1 ) # 4319| { # 4320|-> status = sha->flags; # 4321| frame = shared_entry_v1(gt, ref).frame; # 4322| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:4334:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sha’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:408:5: note: in expansion of macro ‘percpu_read_lock’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/rwlock.h: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:408:5: note: in expansion of macro ‘percpu_read_lock’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:466:12: note: in expansion of macro ‘_active_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_usage_print’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:4325:21: note: in expansion of macro ‘shared_entry_v2’ # 4332| printk("[0x%03x] %5d 0x%"PRI_mfn" 0x%08x %5d 0x%06"PRIx64" 0x%02x\n", # 4333| ref, act->domid, mfn_x(act->mfn), act->pin, # 4334|-> sha->domid, frame, status); # 4335| active_entry_release(act); # 4336| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/kexec.c:842:9: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 840| case KEXEC_TYPE_DEFAULT: # 841| image = kexec_image[base + pos]; # 842|-> ret = continue_hypercall_on_cpu(0, kexec_reboot, image); # 843| break; # 844| case KEXEC_TYPE_CRASH: Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/kimage.c:690:9: warning[deadcode.DeadStores]: Value stored to 'dest_mfn' is never read # 688| size_t size; # 689| # 690|-> dest_mfn = dest >> PAGE_SHIFT; # 691| # 692| size = min_t(unsigned long, PAGE_SIZE, to_copy); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:173:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:540:14: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:547:13: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-private.h:43: included_from: Included from here. /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 171| break; # 172| case XEN_ELFNOTE_PAE_MODE: # 173|-> if ( !strcmp(str, "yes") ) # 174| parms->pae = XEN_PAE_EXTCR3; # 175| if ( strstr(str, "bimodal") ) Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:179:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:540:14: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:547:13: note: in expansion of macro ‘elf_uval’ /usr/include/string.h:156:12: note: argument 1 of ‘strcmp’ must be non-null # 177| break; # 178| case XEN_ELFNOTE_BSD_SYMTAB: # 179|-> if ( !strcmp(str, "yes") ) # 180| parms->bsd_symtab = 1; # 181| break; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-loader.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:18: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c: scope_hint: In function ‘elf_xen_parse_note’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-private.h:88:6: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:161:9: note: in expansion of macro ‘safe_strcpy’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-private.h:73: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:540:14: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:547:13: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:161:9: note: in expansion of macro ‘safe_strcpy’ <built-in>: note: argument 2 of ‘__builtin_strncpy’ must be non-null # 86| # 87| #define safe_strcpy(d,s) \ # 88|-> do { strncpy((d),(s),sizeof((d))-1); \ # 89| (d)[sizeof((d))-1] = '\0'; \ # 90| } while (0) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/livepatch_elf.c:66:5: warning[deadcode.DeadStores]: Value stored to 'delta' is never read # 64| # 65| /* e_shoff and e_shnum overflow checks are done in livepatch_header_check. */ # 66|-> delta = elf->hdr->e_shoff + elf->hdr->e_shnum * elf->hdr->e_shentsize; # 67| ASSERT(delta <= elf->len); # 68| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/livepatch_elf.c:229:5: warning[deadcode.DeadStores]: Value stored to 'offset' is never read # 227| # 228| /* Pointers arithmetic to get file offset. */ # 229|-> offset = strtab_sec->data - data; # 230| # 231| /* Checked already in elf_resolve_sections, but just in case. */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/memory.c:939:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value # 937| */ # 938| for ( i = 0; i < done; ++i ) # 939|-> put_page(pages[i]); # 940| # 941| ret = iommu_iotlb_flush(d, _dfn(xatp->gpfn - done), done, Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/page_alloc.c:1119:9: warning[deadcode.DeadStores]: Value stored to 'next_order' is never read # 1117| } # 1118| # 1119|-> next_order = cur_order = 0; # 1120| # 1121| while ( cur_order < head_order ) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:152:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpuid.h:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpufeature.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:65:16: note: in expansion of macro ‘NULL’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ # 150| { # 151| x = first_range(r); # 152|-> x->s = s; # 153| } # 154| else if ( (x->e < s) && ((x->e + 1) != s) ) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:157:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:74:16: note: in expansion of macro ‘NULL’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ # 155| { # 156| x = next_range(r, x); # 157|-> x->s = s; # 158| } # 159| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:157:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:74:16: note: in expansion of macro ‘NULL’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ # 155| { # 156| x = next_range(r, x); # 157|-> x->s = s; # 158| } # 159| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:160:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:50:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c: scope_hint: In function ‘rangeset_add_range’ # 158| } # 159| # 160|-> x->e = (y->e > e) ? y->e : e; # 161| # 162| for ( ; ; ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:783:14: warning[core.NullDereference]: Access to field 'unit_id' results in a dereference of a null pointer (loaded from variable 'unit') # 781| { # 782| old_unit = v->sched_unit; # 783|-> if ( unit->unit_id + gran == v->vcpu_id ) # 784| unit = unit->next_in_list; # 785| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3008:9: warning[core.NullDereference]: Access to field 'deinit' results in a dereference of a null pointer # 3006| # 3007| sched_test_func(init); # 3008|-> sched_test_func(deinit); # 3009| sched_test_func(pick_resource); # 3010| sched_test_func(alloc_udata); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3009:9: warning[core.NullDereference]: Access to field 'pick_resource' results in a dereference of a null pointer # 3007| sched_test_func(init); # 3008| sched_test_func(deinit); # 3009|-> sched_test_func(pick_resource); # 3010| sched_test_func(alloc_udata); # 3011| sched_test_func(free_udata); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3010:9: warning[core.NullDereference]: Access to field 'alloc_udata' results in a dereference of a null pointer # 3008| sched_test_func(deinit); # 3009| sched_test_func(pick_resource); # 3010|-> sched_test_func(alloc_udata); # 3011| sched_test_func(free_udata); # 3012| sched_test_func(switch_sched); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3011:9: warning[core.NullDereference]: Access to field 'free_udata' results in a dereference of a null pointer # 3009| sched_test_func(pick_resource); # 3010| sched_test_func(alloc_udata); # 3011|-> sched_test_func(free_udata); # 3012| sched_test_func(switch_sched); # 3013| sched_test_func(do_schedule); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3012:9: warning[core.NullDereference]: Access to field 'switch_sched' results in a dereference of a null pointer # 3010| sched_test_func(alloc_udata); # 3011| sched_test_func(free_udata); # 3012|-> sched_test_func(switch_sched); # 3013| sched_test_func(do_schedule); # 3014| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3013:9: warning[core.NullDereference]: Access to field 'do_schedule' results in a dereference of a null pointer # 3011| sched_test_func(free_udata); # 3012| sched_test_func(switch_sched); # 3013|-> sched_test_func(do_schedule); # 3014| # 3015| #undef sched_test_func Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/core.c:3017:14: warning[core.NullDereference]: Access to field 'global_init' results in a dereference of a null pointer # 3015| #undef sched_test_func # 3016| # 3017|-> if ( schedulers[i]->global_init && schedulers[i]->global_init() < 0 ) # 3018| { # 3019| printk("scheduler %s failed initialization, dropped\n", Error: GCC_ANALYZER_WARNING (CWE-835): xen-4.18.1-build/xen-4.18.1/xen/common/sched/cpupool.c: scope_hint: In function ‘cpupool_gran_init’ xen-4.18.1-build/xen-4.18.1/xen/common/sched/cpupool.c:137:16: warning[-Wanalyzer-infinite-loop]: infinite loop xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/smp.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/smp.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/processor.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/msr.h:15: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/time.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/time.h:78: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/cpu.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/sched/cpupool.c:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpuid.h:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpufeature.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/kernel.h:34:40: note: in definition of macro ‘min_t’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/bitops.h:348:36: note: in expansion of macro ‘find_next_bit’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/cpumask.h:211:39: note: in expansion of macro ‘find_first_bit’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/cpumask.h:211:16: note: in expansion of macro ‘min_t’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/cpumask.h:458:36: note: in expansion of macro ‘for_each_cpu’ xen-4.18.1-build/xen-4.18.1/xen/common/sched/cpupool.c:117:5: note: in expansion of macro ‘for_each_online_cpu’ # 135| while ( gran == 0 ) # 136| { # 137|-> gran = cpupool_check_granularity(opt_sched_granularity); # 138| # 139| if ( gran == 0 ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit.c:519:34: warning[deadcode.DeadStores]: Value stored to 'prv' during its initialization is never read # 517| csched_free_pdata(const struct scheduler *ops, void *pcpu, int cpu) # 518| { # 519|-> const struct csched_private *prv = CSCHED_PRIV(ops); # 520| # 521| /* Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit.c:1096:34: warning[deadcode.DeadStores]: Value stored to 'sr' during its initialization is never read # 1094| struct csched_unit * const svc = CSCHED_UNIT(unit); # 1095| unsigned int cpu = sched_unit_master(unit); # 1096|-> const struct sched_resource *sr = get_sched_res(cpu); # 1097| # 1098| SCHED_STAT_CRANK(unit_sleep); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit.c:2101:20: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer (loaded from variable 'iter') # 2099| # 2100| loop = 0; # 2101|-> list_for_each( iter, runq ) # 2102| { # 2103| svc = __runq_elem(iter); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit2.c:1949:18: warning[deadcode.DeadStores]: Value stored to 'cpu' during its initialization is never read # 1947| { # 1948| struct csched2_dom *sdom = svc->sdom; # 1949|-> unsigned int cpu = sched_unit_master(svc->unit); # 1950| # 1951| ASSERT(spin_is_locked(get_sched_res(cpu)->schedule_lock)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit2.c:1996:18: warning[deadcode.DeadStores]: Value stored to 'cpu' during its initialization is never read # 1994| { # 1995| struct csched2_dom *sdom = svc->sdom; # 1996|-> unsigned int cpu = sched_unit_master(svc->unit); # 1997| # 1998| ASSERT(spin_is_locked(get_sched_res(cpu)->schedule_lock)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/credit2.c:3899:24: warning[core.NullDereference]: Access to field 'next' results in a dereference of a null pointer (loaded from variable 'iter') # 3897| # 3898| printk("RUNQ:\n"); # 3899|-> list_for_each( iter, runq ) # 3900| { # 3901| const struct csched2_unit *svc = runq_elem(iter); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/sched/null.c:536:9: warning[deadcode.DeadStores]: Value stored to 'npc' is never read # 534| if ( unlikely(!is_unit_online(unit)) ) # 535| { # 536|-> npc = unit->res->sched_priv; # 537| ASSERT(npc->unit != unit); # 538| ASSERT(list_empty(&nvc->waitq_elem)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/symbols.c:255:13: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller # 253| # 254| if ( !strcmp(name, symname) ) # 255|-> return addr; # 256| # 257| } while ( name[0] != '\0' ); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/timer.c:196:9: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 194| break; # 195| default: # 196|-> rc = 0; # 197| BUG(); # 198| } Error: GCC_ANALYZER_WARNING (CWE-457): xen-4.18.1-build/xen-4.18.1/tools/libs/guest/xg_dom_decompress_unsafe_lzma.c:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/unlzma.c: scope_hint: In function ‘unlzma’ xen-4.18.1-build/xen-4.18.1/xen/common/unlzma.c:575:49: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*rc.ptr’ # 573| if (rc.ptr >= rc.buffer_end) # 574| rc_read(&rc); # 575|-> ((unsigned char *)&header)[i] = *rc.ptr++; # 576| } # 577| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/unlzo.c:78:7: warning[core.NullDereference]: Dereference of null pointer # 76| /* read magic: 9 first bits */ # 77| for (l = 0; l < 9; l++) { # 78|-> if (*parse++ != lzop_magic[l]) # 79| return 0; # 80| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/unlzo.c:87:3: warning[deadcode.DeadStores]: Value stored to 'level' is never read # 85| parse += 7; # 86| if (version >= 0x0940) # 87|-> level = *parse++; # 88| if (get_unaligned_be32(parse) & HEADER_HAS_FILTER) # 89| parse += 8; /* flags + filter info */ Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/vm_event.c:286:5: warning[deadcode.DeadStores]: Value stored to 'free_req' is never read # 284| /* Due to the reservations, this step must succeed. */ # 285| front_ring = &ved->front_ring; # 286|-> free_req = RING_FREE_REQUESTS(front_ring); # 287| ASSERT(free_req > 0); # 288| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/vm_event.c:628:5: warning[deadcode.DeadStores]: Value stored to 'rc' is never read # 626| } # 627| # 628|-> rc = -ENOSYS; # 629| # 630| switch ( vec->mode ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/vsprintf.c:500:22: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'str') # 498| if (*fmt != '%') { # 499| if (str < end) # 500|-> *str = *fmt; # 501| ++str; # 502| continue; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/vsprintf.c:670:18: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'str') # 668| if (size > 0) { # 669| if (str < end) # 670|-> *str = '\0'; # 671| else # 672| end[-1] = '\0'; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/xmalloc_tlsf.c:581:9: warning[deadcode.DeadStores]: Value stored to 'b' is never read # 579| { # 580| p -= b->size & ~FREE_BLOCK; # 581|-> b = p - BHDR_OVERHEAD; # 582| ASSERT(!(b->size & FREE_BLOCK)); # 583| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/unzstd.c:62: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/zstd/decompress.c:1572:4: warning[deadcode.DeadStores]: Value stored to 'remainingSize' is never read # 1570| return ERROR(srcSize_wrong); # 1571| ip += 4; # 1572|-> remainingSize -= 4; # 1573| } # 1574| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/char/ehci-dbgp.c:394:24: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<<' is a garbage value # 392| # 393| for ( i = 0; i < 4 && i < size; i++ ) # 394|-> lo |= bytes[i] << (8 * i); # 395| for ( ; i < 8 && i < size; i++ ) # 396| hi |= bytes[i] << (8 * (i - 4)); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/char/ehci-dbgp.c:964:9: warning[deadcode.DeadStores]: Value stored to 'devnum' is never read # 962| goto err; # 963| } # 964|-> devnum = USB_DEBUG_DEVNUM; # 965| dbgp_printk("debug device renamed to 127\n"); # 966| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/char/ns16550.c:496:15: warning[deadcode.DeadStores]: Although the value stored to 'rc' is used in the enclosing expression, the value is never actually read from 'rc' # 494| uart->irqaction.name = "ns16550"; # 495| uart->irqaction.dev_id = port; # 496|-> if ( (rc = setup_irq(uart->irq, 0, &uart->irqaction)) != 0 ) # 497| printk("ERROR: Failed to allocate ns16550 IRQ %d\n", uart->irq); # 498| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/cpufreq/utility.c:366:22: warning[deadcode.DeadStores]: Value stored to 'prev_freq' during its initialization is never read # 364| if (cpu_online(policy->cpu) && cpufreq_driver.target) # 365| { # 366|-> unsigned int prev_freq = policy->cur; # 367| # 368| retval = alternative_call(cpufreq_driver.target, Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_intr.c:296:9: warning[deadcode.DeadStores]: Value stored to 'fresh' is never read # 294| } # 295| *index = offset; # 296|-> fresh = true; # 297| } # 298| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/iommu.c:265:26: warning[deadcode.DeadStores]: Value stored to 'hd' during its initialization is never read # 263| void __hwdom_init iommu_hwdom_init(struct domain *d) # 264| { # 265|-> struct domain_iommu *hd = dom_iommu(d); # 266| # 267| if ( !is_iommu_enabled(d) ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:832:32: warning[deadcode.DeadStores]: Value stored to 'hd' during its initialization is never read # 830| uint8_t devfn) # 831| { # 832|-> const struct domain_iommu *hd = dom_iommu(d); # 833| struct pci_dev *pdev; # 834| struct domain *target; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:1313:5: warning[deadcode.DeadStores]: Value stored to 'hd' is never read # 1311| ASSERT(pcidevs_locked()); # 1312| # 1313|-> hd = dom_iommu(pdev->domain); # 1314| if ( !is_iommu_enabled(pdev->domain) ) # 1315| return 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:1358:5: warning[deadcode.DeadStores]: Value stored to 'hd' is never read # 1356| return -EINVAL; # 1357| # 1358|-> hd = dom_iommu(pdev->domain); # 1359| if ( !is_iommu_enabled(pdev->domain) ) # 1360| return 0; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:1409:32: warning[deadcode.DeadStores]: Value stored to 'hd' during its initialization is never read # 1407| static int assign_device(struct domain *d, u16 seg, u8 bus, u8 devfn, u32 flag) # 1408| { # 1409|-> const struct domain_iommu *hd = dom_iommu(d); # 1410| struct pci_dev *pdev; # 1411| int rc = 0; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c: scope_hint: In function ‘assign_device’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:1427:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdev’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:17: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘assign_device’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c: scope_hint: In function ‘assign_device’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/io.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/domain.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/domain.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:37:20: note: in expansion of macro ‘PCI_SBDF4_’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:41:25: note: in expansion of macro ‘PCI_SBDF3_’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:42:25: note: in expansion of macro ‘PCI__’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:46:30: note: in expansion of macro ‘PCI_’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/pci.c:1421:31: note: in expansion of macro ‘PCI_SBDF’ # 1425| /* Do not allow broken devices to be assigned to guests. */ # 1426| rc = -EBADF; # 1427|-> if ( pdev->broken && d != hardware_domain && d != dom_io ) # 1428| goto done; # 1429| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/vtd/intremap.c:190:9: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 188| # 189| old_ire = *entry; # 190|-> ret = cmpxchg16b(entry, &old_ire, new_ire); # 191| # 192| /* Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c: scope_hint: In function ‘pt_pirq_iterate’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:744:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pirqs[i]’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:742:47: note: in expansion of macro ‘pirq_dpci’ # 742| struct hvm_pirq_dpci *pirq_dpci = pirq_dpci(pirqs[i]); # 743| # 744|-> pirq = pirqs[i]->pirq; # 745| if ( (pirq_dpci->flags & HVM_IRQ_DPCI_MAPPED) ) # 746| { Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:745:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:742:47: note: in expansion of macro ‘pirq_dpci’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:742:47: note: in expansion of macro ‘pirq_dpci’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:35:12: note: in expansion of macro ‘pirq_dpci’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c:35:12: note: in expansion of macro ‘pirq_dpci’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/x86/hvm.c: scope_hint: In function ‘pt_pirq_iterate’ # 743| # 744| pirq = pirqs[i]->pirq; # 745|-> if ( (pirq_dpci->flags & HVM_IRQ_DPCI_MAPPED) ) # 746| { # 747| rc = cb(d, pirq_dpci, arg); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/vpci/vpci.c:324:27: warning[core.BitwiseShift]: Left shift by '32' overflows the capacity of 'uint32_t' # 322| uint32_t mask = 0xffffffffU >> (32 - 8 * size); # 323| # 324|-> return (data & ~(mask << (offset * 8))) | ((new & mask) << (offset * 8)); # 325| } # 326| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/drivers/vpci/vpci.c:494:32: warning[core.BitwiseShift]: Right shift by '32' overflows the capacity of 'uint32_t' # 492| max(emu.offset, r->offset); # 493| vpci_write_helper(pdev, r, write_size, reg + data_offset - r->offset, # 494|-> data >> (data_offset * 8)); # 495| data_offset += write_size; # 496| if ( data_offset == size ) Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/asm-offsets.c:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/bitops.h:44:9: warning[deadcode.DeadStores]: Value stored to 'x' is never read # 42| } # 43| if (!(x & 1)) { # 44|-> x >>= 1; # 45| r += 1; # 46| } Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/include/xen/bitops.h:77:9: warning[deadcode.DeadStores]: Value stored to 'x' is never read # 75| } # 76| if (!(x & 0x80000000u)) { # 77|-> x <<= 1; # 78| r -= 1; # 79| } Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h: scope_hint: In function ‘iomem_deny_access’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:35:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘iomem_deny_access’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘iomem_deny_access’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:49:30: note: in definition of macro ‘iomem_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:681:38: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘iomem_deny_access’ # 33| unsigned long e) # 34| { # 35|-> int ret = rangeset_remove_range(d->iomem_caps, s, e); # 36| # 37| if ( !ret && !is_iommu_enabled(d) && !cache_flush_permitted(d) ) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:49:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:715:15: note: in expansion of macro ‘iomem_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:49:30: note: in definition of macro ‘iomem_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:714:38: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:715:15: note: in expansion of macro ‘iomem_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:715:15: note: in expansion of macro ‘iomem_access_permitted’ # 47| # 48| #define iomem_access_permitted(d, s, e) \ # 49|-> rangeset_contains_range((d)->iomem_caps, s, e) # 50| # 51| #define irq_permit_access(d, i) \ Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:52:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:665:19: note: in expansion of macro ‘irq_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:63:27: note: in definition of macro ‘pirq_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:661:37: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/pci.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/io.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/hvm/domain.h:16: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/domain.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/domain.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/irq.h:194:37: note: in expansion of macro ‘pirq_field’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:64:17: note: in expansion of macro ‘domain_pirq_to_irq’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:661:15: note: in expansion of macro ‘pirq_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:665:19: note: in expansion of macro ‘irq_permit_access’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:665:19: note: in expansion of macro ‘irq_permit_access’ # 50| # 51| #define irq_permit_access(d, i) \ # 52|-> rangeset_add_singleton((d)->irq_caps, i) # 53| #define irq_deny_access(d, i) \ # 54| rangeset_remove_singleton((d)->irq_caps, i) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:54:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:667:19: note: in expansion of macro ‘irq_deny_access’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:63:27: note: in definition of macro ‘pirq_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:661:37: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/irq.h:194:37: note: in expansion of macro ‘pirq_field’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:64:17: note: in expansion of macro ‘domain_pirq_to_irq’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:661:15: note: in expansion of macro ‘pirq_access_permitted’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:667:19: note: in expansion of macro ‘irq_deny_access’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:667:19: note: in expansion of macro ‘irq_deny_access’ # 52| rangeset_add_singleton((d)->irq_caps, i) # 53| #define irq_deny_access(d, i) \ # 54|-> rangeset_remove_singleton((d)->irq_caps, i) # 55| #define irqs_permit_access(d, s, e) \ # 56| rangeset_add_range((d)->irq_caps, s, e) Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:27: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_prepare_for_transfer’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:36:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘raw_shah’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2218:18: note: in expansion of macro ‘ACCESS_ONCE’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:3810: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/config.h:17: included_from: Included from here. <command-line>: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/current.h:100:32: note: in expansion of macro ‘get_current’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/guest_access.h:33:18: note: in expansion of macro ‘current’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/guest_access.h:135:5: note: in expansion of macro ‘__raw_copy_from_guest’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/guest_access.h:155:5: note: in expansion of macro ‘__copy_from_guest_offset’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2282:23: note: in expansion of macro ‘__copy_from_guest’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_prepare_for_transfer’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/iocap.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/iocap.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2293:19: note: in expansion of macro ‘get_gfn_unshare’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/desc.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/processor.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2312:16: note: in expansion of macro ‘mfn_to_page’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_prepare_for_transfer’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2388:14: note: in expansion of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_prepare_for_transfer’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/compiler.h:21:43: note: in definition of macro ‘unlikely’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c: scope_hint: In function ‘gnttab_prepare_for_transfer’ xen-4.18.1-build/xen-4.18.1/xen/common/grant_table.c:2218:18: note: in expansion of macro ‘ACCESS_ONCE’ # 34| (void)(typeof(x))0; /* Scalar typecheck. */ \ # 35| (volatile typeof(x) *)&(x); }) # 36|-> #define ACCESS_ONCE(x) (*__ACCESS_ONCE(x)) # 37| # 38| struct domain; Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/common/rangeset.c:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/timer.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:66:16: warning[core.NullDereference]: Access to field 'prev' results in a dereference of a null pointer (loaded from variable 'next') # 64| struct list_head *next) # 65| { # 66|-> next->prev = new; # 67| new->next = next; # 68| new->prev = prev; Error: GCC_ANALYZER_WARNING (CWE-835): xen-4.18.1-build/xen-4.18.1/xen/include/xen/timer.h:14: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c: scope_hint: In function ‘physdev_hvm_map_pirq’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:494:10: warning[-Wanalyzer-infinite-loop]: infinite loop xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:58:13: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:7: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:58:13: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:58:13: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpuid.h:8: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/cpufeature.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/system.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/nospec.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:387:5: note: in expansion of macro ‘container_of’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:495:16: note: in expansion of macro ‘list_entry’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:58:13: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/physdev.c:58:13: note: in expansion of macro ‘list_for_each_entry’ # 492| #define list_for_each_entry(pos, head, member) \ # 493| for (pos = list_entry((head)->next, typeof(*pos), member); \ # 494|-> &pos->member != (head); \ # 495| pos = list_entry(pos->member.next, typeof(*pos), member)) # 496| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/hvm/hvm.c:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/ioreq.h:22: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:1082:28: warning[core.NullDereference]: Access to field 'is_privileged' results in a dereference of a null pointer (loaded from variable 'd') # 1080| return false; # 1081| # 1082|-> return evaluate_nospec(d->is_privileged); # 1083| } # 1084| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/cpu/amd.c:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:1090:27: warning[core.NullDereference]: Access to field 'options' results in a dereference of a null pointer (loaded from variable 'd') # 1088| { # 1089| return IS_ENABLED(CONFIG_PV) && # 1090|-> evaluate_nospec(!(d->options & XEN_DOMCTL_CDF_hvm)); # 1091| } # 1092| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:1137:26: warning[core.NullDereference]: Access to field 'domain' results in a dereference of a null pointer (loaded from variable 'v') # 1135| static always_inline bool is_hvm_vcpu(const struct vcpu *v) # 1136| { # 1137|-> return is_hvm_domain(v->domain); # 1138| } # 1139| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:1137:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c: scope_hint: In function ‘show_registers’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/smp.h:11: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/smp.h:4: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/processor.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/msr.h:15: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/time.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/time.h:78: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/spinlock.h:5: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/sched.h:6: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/regs.h:9:34: note: in expansion of macro ‘guest_cpu_user_regs’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c:133:10: note: in expansion of macro ‘guest_mode’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/x86_64/traps.c: scope_hint: In function ‘show_registers’ # 1135| static always_inline bool is_hvm_vcpu(const struct vcpu *v) # 1136| { # 1137|-> return is_hvm_domain(v->domain); # 1138| } # 1139| Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-private.h:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:18: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c: scope_hint: In function ‘elf_xen_parse_note’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/string.h:40:24: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:173:15: note: in expansion of macro ‘strcmp’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-private.h:21: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:540:14: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:547:13: note: in expansion of macro ‘elf_uval’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:255:14: note: in expansion of macro ‘strcmp’ xen-4.18.1-build/xen-4.18.1/xen/common/libelf/libelf-dominfo.c:173:15: note: in expansion of macro ‘strcmp’ <built-in>: note: argument 1 of ‘__builtin_strcmp’ must be non-null # 38| # 39| #ifndef __HAVE_ARCH_STRCMP # 40|-> #define strcmp(s1, s2) __builtin_strcmp(s1, s2) # 41| #endif # 42| Error: GCC_ANALYZER_WARNING (CWE-688): xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/acpi.h:40: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:20: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c: scope_hint: In function ‘parse_ivhd_device_special’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/string.h:72:25: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:873:17: note: in expansion of macro ‘memset’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:1113:5: note: in expansion of macro ‘BUG_ON’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu.h:202:5: note: in expansion of macro ‘list_for_each_entry’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:114:5: note: in expansion of macro ‘for_each_amd_iommu’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:27: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:797:5: note: in expansion of macro ‘AMD_IOMMU_DEBUG’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:23: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:830:18: note: in expansion of macro ‘IO_APIC_ID’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:865:46: note: in expansion of macro ‘xmalloc_array’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c: scope_hint: In function ‘parse_ivhd_device_special’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/string.h:72:48: note: in definition of macro ‘memset’ xen-4.18.1-build/xen-4.18.1/xen/drivers/passthrough/amd/iommu_acpi.c:873:17: note: in expansion of macro ‘memset’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 70| # 71| #ifndef __HAVE_ARCH_MEMSET # 72|-> #define memset(s, c, n) __builtin_memset(s, c, n) # 73| #endif # 74| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/string.h:76:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:636:9: note: in expansion of macro ‘memcpy’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/arch/x86/include/asm/nospec.h:13:5: note: in expansion of macro ‘alternative’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c: scope_hint: In function ‘do_domctl’ xen-4.18.1-build/xen-4.18.1/xen/common/domctl.c:636:9: note: in expansion of macro ‘memcpy’ # 74| # 75| #ifndef __HAVE_ARCH_MEMCPY # 76|-> #define memcpy(d, s, n) __builtin_memcpy(d, s, n) # 77| #endif # 78| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/lib/list-sort.c:91:20: warning[core.NullDereference]: Access to field 'prev' results in a dereference of a null pointer (loaded from field 'next') # 89| (*cmp)(priv, tail->next, tail->next); # 90| # 91|-> tail->next->prev = tail; # 92| tail = tail->next; # 93| } while (tail->next); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/lib/list-sort.c: scope_hint: In function ‘merge_and_restore_back_links’ xen-4.18.1-build/xen-4.18.1/xen/lib/list-sort.c:91:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘list’ xen-4.18.1-build/xen-4.18.1/xen/include/xen/lib.h:13: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/include/xen/list.h:10: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/lib/list-sort.c:18: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/lib/list-sort.c:126:9: note: in expansion of macro ‘memset’ # 89| (*cmp)(priv, tail->next, tail->next); # 90| # 91|-> tail->next->prev = tail; # 92| tail = tail->next; # 93| } while (tail->next); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/lib/rbtree.c:331:8: warning[core.NullDereference]: Access to field '__rb_parent_color' results in a dereference of a null pointer (loaded from variable 'sibling') # 329| } else { # 330| sibling = parent->rb_left; # 331|-> if (rb_is_red(sibling)) { # 332| /* Case 1 - right rotate at parent */ # 333| parent->rb_left = tmp1 = sibling->rb_right; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/fixdep.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-127): xen-4.18.1-build/xen-4.18.1/xen/tools/fixdep.c: scope_hint: In function ‘parse_dep_file’ xen-4.18.1-build/xen-4.18.1/xen/tools/fixdep.c:327:30: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read # └──────────────────────────────────┘ # ^ # 325| is_last = (*p == '\0'); # 326| /* Is the token we found a target name? */ # 327|-> is_target = (*(p-1) == ':'); # 328| /* Don't write any target names into the dependency file */ # 329| if (is_target) { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/conf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/conf.c:135:36: warning[core.NullDereference]: Access to field 'text' results in a dereference of a null pointer (loaded from field 'prompt') # 133| # 134| while (1) { # 135|-> printf("%*s%s ", indent - 1, "", menu->prompt->text); # 136| printf("(%s) ", sym->name); # 137| def = sym_get_string_value(sym); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/conf.c:168:36: warning[core.NullDereference]: Access to field 'text' results in a dereference of a null pointer (loaded from field 'prompt') # 166| # 167| while (1) { # 168|-> printf("%*s%s ", indent - 1, "", menu->prompt->text); # 169| if (sym->name) # 170| printf("(%s) ", sym->name); Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-126): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c: scope_hint: In function ‘make_parent_dir’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:96:9: warning[-Wanalyzer-out-of-bounds]: buffer over-read xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lkc.h:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:19: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:1001:9: note: in expansion of macro ‘for_all_symbols’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:96:9: note: read of 1 byte from after the end of ‘depfile_path’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:96:9: note: valid subscripts for ‘depfile_path’ are ‘[0]’ to ‘[4095]’ # └──────────────────────────────────────────────────────────────────────┘ # ^ ^ ^ ^ # 94| char *p; # 95| # 96|-> strncpy(tmp, path, sizeof(tmp)); # 97| tmp[sizeof(tmp) - 1] = 0; # 98| Error: CPPCHECK_WARNING (CWE-404): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:1090: error[resourceLeak]: Resource leak: tristate # 1088| fclose(out); # 1089| fclose(tristate); # 1090|-> return 1; # 1091| } # 1092| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/confdata.c:1196:16: warning[core.DivideZero]: Division by zero # 1194| * set the rest to no so we have only one set # 1195| */ # 1196|-> def = (rand() % cnt); # 1197| # 1198| cnt = 0; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lkc.h:9: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:12: included_from: Included from here. xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:52:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1218:9: note: in expansion of macro ‘expr_list_for_each_sym’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:207:30: note: in definition of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:210:34: note: in expansion of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:207:30: note: in definition of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:210:34: note: in expansion of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_choice_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1218:9: note: in expansion of macro ‘expr_list_for_each_sym’ # 50| # 51| #define expr_list_for_each_sym(l, e, s) \ # 52|-> for (e = (l); e && (s = e->right.sym); e = e->left.expr) # 53| # 54| struct expr_value { Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:277:46: warning[-Wanalyzer-malloc-leak]: leak of ‘yy_create_buffer(zconf_fopen(*file.name), 16384)’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 275| */ # 276| #define YY_CURRENT_BUFFER ( (yy_buffer_stack) \ # 277|-> ? (yy_buffer_stack)[(yy_buffer_stack_top)] \ # 278| : NULL) # 279| /* Same as previous macro, but useful when we know that the buffer stack is not Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3416:46: warning[-Wanalyzer-malloc-leak]: leak of ‘*b.yy_ch_buf’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3580:38: note: in expansion of macro ‘YY_CURRENT_BUFFER_LVALUE’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_get_next_buffer’ # 3414| b->yy_buf_size *= 2; # 3415| # 3416|-> b->yy_ch_buf = (char *) # 3417| /* Include room in for 2 EOB chars. */ # 3418| yyrealloc( (void *) b->yy_ch_buf, Error: GCC_ANALYZER_WARNING (CWE-775): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_switch_to_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3672:12: warning[-Wanalyzer-file-leak]: leak of FILE xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 3670| */ # 3671| yyensure_buffer_stack (); # 3672|-> if ( YY_CURRENT_BUFFER == new_buffer ) # 3673| return; # 3674| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3672:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3802:19: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3769:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3672:14: note: in expansion of macro ‘YY_CURRENT_BUFFER’ # 3670| */ # 3671| yyensure_buffer_stack (); # 3672|-> if ( YY_CURRENT_BUFFER == new_buffer ) # 3673| return; # 3674| Error: GCC_ANALYZER_WARNING (CWE-401): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_create_buffer’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3722:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:4346:30: note: in expansion of macro ‘YY_CURRENT_BUFFER’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c: scope_hint: In function ‘yy_create_buffer’ # 3720| */ # 3721| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) ); # 3722|-> if ( ! b->yy_ch_buf ) # 3723| YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); # 3724| Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3762: warning[nullPointer]: Possible null pointer dereference: b # 3760| yy_flush_buffer( b ); # 3761| # 3762|-> b->yy_input_file = file; # 3763| b->yy_fill_buffer = 1; # 3764| Error: CPPCHECK_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/lexer.lex.c:3763: warning[nullPointer]: Possible null pointer dereference: b # 3761| # 3762| b->yy_input_file = file; # 3763|-> b->yy_fill_buffer = 1; # 3764| # 3765| /* If b is the current buffer, then yy_init_buffer was _probably_ Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/parser.tab.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/preprocess.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1054:3: warning[core.StackAddressEscape]: Address of stack memory associated with local variable 'cv_stack' is still referred to by the global variable 'check_top' upon returning to the caller. This will be a dangling reference # 1052| if (!stack) { # 1053| fprintf(stderr, "unexpected recursive dependency error\n"); # 1054|-> return; # 1055| } # 1056| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1054:3: warning[core.StackAddressEscape]: Address of stack memory associated with local variable 'cv_stack' is still referred to by the stack variable 'stack' upon returning to the caller. This will be a dangling reference # 1052| if (!stack) { # 1053| fprintf(stderr, "unexpected recursive dependency error\n"); # 1054|-> return; # 1055| } # 1056| Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_print_recursive’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1073:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘prop’ # 1071| } # 1072| if (stack->sym == last_sym) # 1073|-> fprintf(stderr, "%s:%d:error: recursive dependency detected!\n", # 1074| prop->file->name, prop->lineno); # 1075| Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1074:5: warning[core.NullDereference]: Access to field 'file' results in a dereference of a null pointer (loaded from variable 'prop') # 1072| if (stack->sym == last_sym) # 1073| fprintf(stderr, "%s:%d:error: recursive dependency detected!\n", # 1074|-> prop->file->name, prop->lineno); # 1075| # 1076| if (sym_is_choice(sym)) { Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1078:5: warning[core.NullDereference]: Access to field 'file' results in a dereference of a null pointer (loaded from variable 'menu') # 1076| if (sym_is_choice(sym)) { # 1077| fprintf(stderr, "%s:%d:\tchoice %s contains symbol %s\n", # 1078|-> menu->file->name, menu->lineno, # 1079| sym->name ? sym->name : "<choice>", # 1080| next_sym->name ? next_sym->name : "<choice>"); Error: CLANG_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1083:5: warning[core.NullDereference]: Access to field 'file' results in a dereference of a null pointer (loaded from variable 'menu') # 1081| } else if (sym_is_choice_value(sym)) { # 1082| fprintf(stderr, "%s:%d:\tsymbol %s is part of choice %s\n", # 1083|-> menu->file->name, menu->lineno, # 1084| sym->name ? sym->name : "<choice>", # 1085| next_sym->name ? next_sym->name : "<choice>"); Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1250:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sym’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:207:30: note: in definition of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/expr.h:210:34: note: in expansion of macro ‘for_all_properties’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:72:9: note: in expansion of macro ‘for_all_choices’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_deps’ # 1248| struct property *prop; # 1249| # 1250|-> if (sym->flags & SYMBOL_CHECK) { # 1251| sym_check_print_recursive(sym); # 1252| return sym; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c:1300:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_deps’ xen-4.18.1-build/xen-4.18.1/xen/tools/kconfig/symbol.c: scope_hint: In function ‘sym_check_deps’ # 1298| struct symbol *prop_get_symbol(struct property *prop) # 1299| { # 1300|-> if (prop->expr && (prop->expr->type == E_SYMBOL || # 1301| prop->expr->type == E_LIST)) # 1302| return prop->expr->left.sym; Error: CPPCHECK_WARNING: xen-4.18.1-build/xen-4.18.1/xen/tools/symbols.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-415): xen-4.18.1-build/xen-4.18.1/xen/tools/symbols.c: scope_hint: In function ‘read_symbol’ xen-4.18.1-build/xen-4.18.1/xen/tools/symbols.c:120:17: warning[-Wanalyzer-double-free]: double-‘free’ of ‘0’ # 118| input_format == fmt_sysv && !*type && stype == '?' && sym && # 119| sym[1] && strchr("cSsoh", sym[1]) && !sym[2])) { # 120|-> free(filename); # 121| filename = *str ? strdup(str) : NULL; # 122| goto skip_tail; Error: GCC_ANALYZER_WARNING (CWE-476): xen-4.18.1-build/xen-4.18.1/xen/tools/symbols.c:175:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*s.sym’ # 173| s->type = stype; /* As s->sym[0] ends mangled. */ # 174| } # 175|-> s->sym[0] = stype; # 176| rc = 0; # 177|