Task #24351 - skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa/scan-results.js
back to task #24351download
{ "scan": { "analyzer-version-clippy": "1.82.0", "analyzer-version-cppcheck": "2.16.0", "analyzer-version-gcc": "14.2.1", "analyzer-version-gcc-analyzer": "14.2.1", "analyzer-version-shellcheck": "0.10.0", "analyzer-version-unicontrol": "0.0.2", "enabled-plugins": "clippy, cppcheck, gcc, shellcheck, unicontrol", "exit-code": 0, "host": "ip-172-16-1-22.us-west-2.compute.internal", "mock-config": "fedora-rawhide-x86_64", "project-name": "skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa", "store-results-to": "/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.tar.xz", "time-created": "2024-11-16 00:17:29", "time-finished": "2024-11-16 00:20:47", "tool": "csmock", "tool-args": "'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.src.rpm'", "tool-version": "csmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9" }, "defects": [ { "checker": "SHELLCHECK_WARNING", "cwe": 398, "language": "shell", "tool": "shellcheck", "hash_v1": "d53b814040fea3cf321083306c52401f250fa210", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/010-inspect.bats", "line": 39, "column": 18, "h_size": 21, "event": "warning[SC2038]", "message": "Use 'find .. -print0 | xargs -0 ..' or 'find .. -exec .. +' to allow non-alphanumeric filenames.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 37| # but not the digest of the config blob ($config_digest), if any.", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 38| layers=$(jq -r '.Layers' <<<\"$inspect_local\")", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 39|-> for sha in $(find $workdir -type f | xargs -l1 basename | grep -E '^[0-9a-f]{64}$'); do", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 40| if [ \"sha256:$sha\" != \"$config_digest\" ]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 41| expect_output --from=\"$layers\" --substring \"sha256:$sha\" \\", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 88, "language": "shell", "tool": "shellcheck", "hash_v1": "bfdcccd65b71797e0e613e195c9215ce52b98233", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/010-inspect.bats", "line": 86, "column": 19, "h_size": 17, "event": "error[SC2068]", "message": "Double quote array expansions to avoid re-splitting elements.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 84| check_array=(FGC=f31 DISTTAG=f31container)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 85| remote=$(jq '.Env[]' <<<\"$inspect_remote\")", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 86|-> for substr in ${check_array[@]}; do", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 87| expect_output --from=\"$remote\" --substring \"$substr\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 88| done", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 571, "language": "shell", "tool": "shellcheck", "hash_v1": "17315d755c7659a654f77d60b1ce841f3a17253f", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/020-copy.bats", "line": 56, "column": 11, "h_size": 5, "event": "warning[SC2155]", "message": "Declare and assign separately to avoid masking return values.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 54| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 55| # zstd magic number", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 56|-> local magic=$(printf \"\\x28\\xb5\\x2f\\xfd\")", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 57| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 58| # Check there is at least one file that has the zstd magic number as the first 4 bytes", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 156, "language": "shell", "tool": "shellcheck", "hash_v1": "1e44341b41b33c911572a9a29992eaac7510b473", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/050-signing.bats", "line": 20, "column": 10, "h_size": 19, "event": "warning[SC2046]", "message": "Quote this to prevent word splitting.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 18| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 19| PASSPHRASE_FILE_WRONG=$TESTDIR/passphrase-file-wrong", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 20|-> echo $(random_string 10) > $PASSPHRASE_FILE_WRONG", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 21| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 22| # gpg on f30 needs this, otherwise:", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 563, "language": "shell", "tool": "shellcheck", "hash_v1": "56cf55f9c7a0c8f69c768b1b4fab990db917519d", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/050-signing.bats", "line": 117, "column": 25, "h_size": 8, "event": "warning[SC2034]", "message": "comments appears unused. Verify use (or export if used externally).", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 115| # Push a bunch of images. Do so *without* --policy flag; this lets us", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 116| # sign or not, creating images that will or won't conform to policy.", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 117|-> while read path sig comments; do", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 118| local sign_opt=", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 119| if [[ $sig != '-' ]]; then", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 398, "language": "shell", "tool": "shellcheck", "hash_v1": "654797aefabd0483cbbd2e938f75e0fa4e7e9980", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/050-signing.bats", "line": 210, "column": 5, "h_size": 2, "event": "warning[SC2010]", "message": "Don't use ls | grep. Use a glob or a for loop with a condition to allow non-alphanumeric filenames.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 208| docker://localhost:5000/myns/alice:signed \\", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 209| dir:$TESTDIR/busybox-unsigned", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 210|-> ls $TESTDIR/busybox-signed | grep \"signature\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 211| [ -z \"$(ls $TESTDIR/busybox-unsigned | grep \"signature\")\" ]", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 212| }", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 398, "language": "shell", "tool": "shellcheck", "hash_v1": "1a782b3882855765925d3aaa5c4b1c0a3616299e", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/050-signing.bats", "line": 211, "column": 13, "h_size": 2, "event": "warning[SC2010]", "message": "Don't use ls | grep. Use a glob or a for loop with a condition to allow non-alphanumeric filenames.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 209| dir:$TESTDIR/busybox-unsigned", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 210| ls $TESTDIR/busybox-signed | grep \"signature\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 211|-> [ -z \"$(ls $TESTDIR/busybox-unsigned | grep \"signature\")\" ]", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 212| }", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 213| ", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 670, "language": "shell", "tool": "shellcheck", "hash_v1": "29194a35d29c3eb71ebf455519bab5fc8ca27f65", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 4, "column": 46, "h_size": 14, "event": "warning[SC2128]", "message": "Expanding an array without an index only gives the first element.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 2| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 3| # Directory containing system test sources", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 4|-> TEST_SOURCE_DIR=${TEST_SOURCE_DIR:-$(dirname ${BASH_SOURCE})}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 5| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 6| # Skopeo executable", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 457, "language": "shell", "tool": "shellcheck", "hash_v1": "16e58efcb7f2bc70ed3792ad905dd784b49b618b", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 88, "column": 11, "h_size": 7, "event": "warning[SC2154]", "message": "status is referenced but not assigned.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 86| echo \"$output\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 87| fi", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 88|-> if [ \"$status\" -ne 0 ]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 89| echo -n \"[ rc=$status \";", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 90| if [ -n \"$expected_rc\" ]; then", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 477, "language": "shell", "tool": "shellcheck", "hash_v1": "3cd8248fce9fe405420548e7e89b2cf41484b594", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 100, "column": 28, "h_size": 2, "event": "warning[SC2166]", "message": "Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 98| fi", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 99| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 100|-> if [ \"$status\" -eq 124 -o \"$status\" -eq 137 ]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 101| # FIXME: 'timeout -v' requires coreutils-8.29; travis seems to have", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 102| # an older version. If/when travis updates, please add -v", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 571, "language": "shell", "tool": "shellcheck", "hash_v1": "686a9c69db0b277e099efc8d8d9db3c45bc57e41", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 174, "column": 15, "h_size": 5, "event": "warning[SC2155]", "message": "Declare and assign separately to avoid masking return values.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 172| local opt", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 173| for opt; do", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 174|-> local value=$(expr \"$opt\" : '[^=]*=\\(.*\\)')", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 175| case \"$opt\" in", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 176| --from=*) actual=\"$value\"; shift;;", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 457, "language": "shell", "tool": "shellcheck", "hash_v1": "f80d287111f3c3af78b8ed1882320545f068785b", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 226, "column": 19, "h_size": 12, "event": "warning[SC2154]", "message": "lines is referenced but not assigned (did you mean 'line'?).", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 224| local testname=\"${2:-${MOST_RECENT_SKOPEO_COMMAND:-[no test name given]}}\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 225| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 226|-> local actual=\"${#lines[@]}\"", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 227| if [ \"$actual\" -eq \"$expect\" ]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 228| return", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 571, "language": "shell", "tool": "shellcheck", "hash_v1": "686a9c69db0b277e099efc8d8d9db3c45bc57e41", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 273, "column": 15, "h_size": 5, "event": "warning[SC2155]", "message": "Declare and assign separately to avoid masking return values.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 271| local opt", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 272| for opt; do", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 273|-> local value=$(expr \"$opt\" : '[^=]*=\\(.*\\)')", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 274| case \"$opt\" in", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 275| --port=*) port=\"$value\"; shift;;", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 140, "language": "shell", "tool": "shellcheck", "hash_v1": "2c601bbece53ccc56abaeada8015541d95758373", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 293, "column": 27, "h_size": 8, "event": "warning[SC2206]", "message": "Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 291| mkdir -p $AUTHDIR", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 292| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 293|-> local -a reg_args=(-v $AUTHDIR:/auth:Z -p $port:5000)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 294| if [[ \"$enable_delete\" == \"true\" ]]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 295| reg_args+=( -e REGISTRY_STORAGE_DELETE_ENABLED=true)", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "cwe": 140, "language": "shell", "tool": "shellcheck", "hash_v1": "2c601bbece53ccc56abaeada8015541d95758373", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/helpers.bash", "line": 293, "column": 47, "h_size": 5, "event": "warning[SC2206]", "message": "Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 291| mkdir -p $AUTHDIR", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 292| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 293|-> local -a reg_args=(-v $AUTHDIR:/auth:Z -p $port:5000)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 294| if [[ \"$enable_delete\" == \"true\" ]]; then", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 295| reg_args+=( -e REGISTRY_STORAGE_DELETE_ENABLED=true)", "verbosity_level": 1 } ] }, { "checker": "SHELLCHECK_WARNING", "language": "shell", "tool": "shellcheck", "hash_v1": "46097b63ab1b604a0dd104b67f14557783cc9057", "key_event_idx": 0, "events": [ { "file_name": "/usr/share/skopeo/test/system/make-noarch-manifest", "line": 14, "column": 30, "h_size": 11, "event": "warning[SC3020]", "message": "In POSIX sh, &> is undefined.", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 12| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 13| # (In case older image exists from a prior run)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 14|-> buildah rmi $imgname:$imgtag &>/dev/null || true", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 15| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 16| #", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 775, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "1fe8f37cb403a2e19bb2cab76b9b77effa7d9c20", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 0, "event": "scope_hint", "message": "In function ‘parse_proc_stringlist’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "warning[-Wanalyzer-fd-leak]", "message": "leak of file descriptor ‘open(list, 0)’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 108, "column": 14, "event": "note", "message": "(4) opened here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(5) assuming ‘open(list, 0)’ is a valid file descriptor (>= 0)", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(6) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(7) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(8) when ‘realloc’ fails", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(9) ‘open(list, 0)’ leaks here; was opened at (4)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 116| \t\tnew_size = used + BUFSTEP;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 117| \t\tnew_buf = realloc(buf, new_size);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 118|-> \t\tif (new_buf == NULL) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 119| \t\t\tfree(buf);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 120| \t\t\tfprintf(stderr, \"realloc(%ld): out of memory\\n\", (long)(size + BUFSTEP));", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 775, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "ae8e657eb85c8cb2b577b11c00d5adcc6644dd5f", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "warning[-Wanalyzer-fd-leak]", "message": "leak of file descriptor ‘open(list, 0)’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 108, "column": 14, "event": "note", "message": "(4) opened here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(5) assuming ‘open(list, 0)’ is a valid file descriptor (>= 0)", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(6) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(7) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(8) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(9) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(10) ...to here (11) ‘open(list, 0)’ leaks here; was opened at (4)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 123| \t\tbuf = new_buf;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 124| \t\tsize = new_size;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 125|-> \t\tmemset(buf + used, '\\0', size - used);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 126| \t\tn = read(fd, buf + used, size - used - 1);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 127| \t\tif (n < 0) {", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "771b4f1daa37ad4b188b6c4720aa034d70c17deb", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 0, "event": "scope_hint", "message": "In function ‘containers_reexec’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘parse_proc_stringlist(\"/proc/self/cmdline\")’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 300, "column": 6, "event": "note", "message": "(1) entry to ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 305, "column": 17, "event": "note", "message": "(2) calling ‘_containers_unshare_parse_envint’ from ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 59, "column": 12, "event": "note", "message": "(3) entry to ‘_containers_unshare_parse_envint’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 64, "column": 12, "event": "note", "message": "(4) following ‘false’ branch (when ‘p’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 67, "column": 11, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 69, "column": 12, "event": "note", "message": "(6) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 73, "column": 9, "event": "note", "message": "(7) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 305, "column": 17, "event": "note", "message": "(8) returning to ‘_containers_unshare’ from ‘_containers_unshare_parse_envint’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 306, "column": 12, "event": "note", "message": "(9) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 309, "column": 20, "event": "note", "message": "(10) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 318, "column": 12, "event": "note", "message": "(11) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 327, "column": 22, "event": "note", "message": "(12) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 328, "column": 12, "event": "note", "message": "(13) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 336, "column": 15, "event": "note", "message": "(14) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 337, "column": 12, "event": "note", "message": "(15) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 343, "column": 16, "event": "note", "message": "(16) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 344, "column": 12, "event": "note", "message": "(17) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 350, "column": 16, "event": "note", "message": "(18) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 351, "column": 12, "event": "note", "message": "(19) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 357, "column": 12, "event": "note", "message": "(20) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 373, "column": 13, "event": "note", "message": "(21) calling ‘containers_reexec’ from ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(22) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(23) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(24) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(25) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(26) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(27) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(28) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(29) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(30) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(31) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(32) following ‘true’ branch (when ‘n == 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 136, "column": 9, "event": "note", "message": "(33) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 138, "column": 23, "event": "note", "message": "(34) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 143, "column": 32, "event": "note", "message": "(35) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 143, "column": 15, "event": "note", "message": "(36) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(37) assuming ‘ret’ is non-NULL", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(38) following ‘false’ branch (when ‘ret’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(39) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 149, "column": 23, "event": "note", "message": "(40) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 12, "event": "note", "message": "(41) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(42) returning to ‘containers_reexec’ from ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 280, "column": 12, "event": "note", "message": "(43) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 284, "column": 19, "event": "note", "message": "(44) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(45) ‘parse_proc_stringlist(\"/proc/self/cmdline\")’ leaks here; was allocated at (36)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 123| \t\tbuf = new_buf;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 124| \t\tsize = new_size;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 125|-> \t\tmemset(buf + used, '\\0', size - used);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 126| \t\tn = read(fd, buf + used, size - used - 1);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 127| \t\tif (n < 0) {", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "134514f80f59fe556f51004b83007f5ab0b0a149", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 128, "column": 25, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘buf’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(4) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(6) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(7) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(9) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(10) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(11) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(12) following ‘false’ branch (when ‘n != 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 134, "column": 22, "event": "note", "message": "(13) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(14) when ‘realloc’ succeeds, without moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(15) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(16) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 128, "column": 25, "event": "note", "message": "(17) ‘buf’ leaks here; was allocated at (6)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 126| \t\tn = read(fd, buf + used, size - used - 1);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 127| \t\tif (n < 0) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 129| \t\t\treturn NULL;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 130| \t\t}", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "bc9bb87188e74fca7a70ddbd4860ae5a1b825817", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 0, "event": "scope_hint", "message": "In function ‘parse_proc_stringlist’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 128, "column": 25, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘new_buf’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(4) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(6) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(7) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(9) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 128, "column": 25, "event": "note", "message": "(10) ‘new_buf’ leaks here; was allocated at (6)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 126| \t\tn = read(fd, buf + used, size - used - 1);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 127| \t\tif (n < 0) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 129| \t\t\treturn NULL;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 130| \t\t}", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "feac06a6b664ccdee61d983b1d83e6d826428fec", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 16, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘buf’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(4) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(6) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(7) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(9) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(10) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(11) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(12) following ‘false’ branch (when ‘n != 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 134, "column": 22, "event": "note", "message": "(13) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(14) when ‘realloc’ succeeds, without moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(15) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(16) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(17) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(18) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(19) following ‘false’ branch (when ‘ret’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(20) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 149, "column": 23, "event": "note", "message": "(21) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 12, "event": "note", "message": "(22) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 16, "event": "note", "message": "(23) ‘buf’ leaks here; was allocated at (6)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 152| \t\t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 153| \t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 154|-> \tret[i] = NULL;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 155| \treturn ret;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 156| }", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "b03d373b833e09ae66ac245c10629c16a84332ad", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 16, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘new_buf’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(1) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(3) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(4) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(6) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(7) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(9) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(10) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(11) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(12) following ‘true’ branch (when ‘n == 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 136, "column": 9, "event": "note", "message": "(13) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 138, "column": 23, "event": "note", "message": "(14) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 143, "column": 32, "event": "note", "message": "(15) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(16) following ‘false’ branch (when ‘ret’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(17) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 149, "column": 23, "event": "note", "message": "(18) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 12, "event": "note", "message": "(19) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 16, "event": "note", "message": "(20) ‘new_buf’ leaks here; was allocated at (6)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 152| \t\t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 153| \t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 154|-> \tret[i] = NULL;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 155| \treturn ret;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 156| }", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "d920c6555916426fafb2bc64ed51651c57e808ba", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 0, "event": "scope_hint", "message": "In function ‘containers_reexec’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 291, "column": 12, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘parse_proc_stringlist(\"/proc/self/cmdline\")’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 300, "column": 6, "event": "note", "message": "(1) entry to ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 305, "column": 17, "event": "note", "message": "(2) calling ‘_containers_unshare_parse_envint’ from ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 59, "column": 12, "event": "note", "message": "(3) entry to ‘_containers_unshare_parse_envint’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 64, "column": 12, "event": "note", "message": "(4) following ‘false’ branch (when ‘p’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 67, "column": 11, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 69, "column": 12, "event": "note", "message": "(6) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 73, "column": 9, "event": "note", "message": "(7) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 305, "column": 17, "event": "note", "message": "(8) returning to ‘_containers_unshare’ from ‘_containers_unshare_parse_envint’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 306, "column": 12, "event": "note", "message": "(9) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 309, "column": 20, "event": "note", "message": "(10) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 318, "column": 12, "event": "note", "message": "(11) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 327, "column": 22, "event": "note", "message": "(12) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 328, "column": 12, "event": "note", "message": "(13) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 336, "column": 15, "event": "note", "message": "(14) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 337, "column": 12, "event": "note", "message": "(15) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 343, "column": 16, "event": "note", "message": "(16) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 344, "column": 12, "event": "note", "message": "(17) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 350, "column": 16, "event": "note", "message": "(18) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 351, "column": 12, "event": "note", "message": "(19) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 357, "column": 12, "event": "note", "message": "(20) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 373, "column": 13, "event": "note", "message": "(21) calling ‘containers_reexec’ from ‘_containers_unshare’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 275, "column": 12, "event": "note", "message": "(22) entry to ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(23) calling ‘parse_proc_stringlist’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 103, "column": 15, "event": "note", "message": "(24) entry to ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 109, "column": 12, "event": "note", "message": "(25) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(26) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 117, "column": 27, "event": "note", "message": "(27) when ‘realloc’ succeeds, moving buffer", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 118, "column": 20, "event": "note", "message": "(28) following ‘false’ branch (when ‘new_buf’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 125, "column": 28, "event": "note", "message": "(29) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 127, "column": 20, "event": "note", "message": "(30) following ‘false’ branch (when ‘n >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(31) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 131, "column": 20, "event": "note", "message": "(32) following ‘true’ branch (when ‘n == 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 136, "column": 9, "event": "note", "message": "(33) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 138, "column": 23, "event": "note", "message": "(34) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 143, "column": 32, "event": "note", "message": "(35) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 143, "column": 15, "event": "note", "message": "(36) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(37) assuming ‘ret’ is non-NULL", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 144, "column": 12, "event": "note", "message": "(38) following ‘false’ branch (when ‘ret’ is non-NULL)...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(39) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 149, "column": 23, "event": "note", "message": "(40) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 154, "column": 12, "event": "note", "message": "(41) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 279, "column": 16, "event": "note", "message": "(42) returning to ‘containers_reexec’ from ‘parse_proc_stringlist’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 280, "column": 12, "event": "note", "message": "(43) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 284, "column": 19, "event": "note", "message": "(44) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 287, "column": 22, "event": "note", "message": "(45) calling ‘copy_self_proc_exe’ from ‘containers_reexec’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 220, "column": 12, "event": "note", "message": "(46) entry to ‘copy_self_proc_exe’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 227, "column": 12, "event": "note", "message": "(47) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 231, "column": 13, "event": "note", "message": "(48) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 231, "column": 12, "event": "note", "message": "(49) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 18, "event": "included_from", "message": "Included from here.", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 236, "column": 19, "event": "note", "message": "(50) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 238, "column": 12, "event": "note", "message": "(51) following ‘false’ branch (when ‘mmfd != -1’)...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(52) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 244, "column": 20, "event": "note", "message": "(53) following ‘false’ branch (when ‘n_read >= 0’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 248, "column": 20, "event": "note", "message": "(54) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 262, "column": 12, "event": "note", "message": "(55) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 229, "column": 24, "event": "note", "message": "(56) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 287, "column": 22, "event": "note", "message": "(57) returning to ‘containers_reexec’ from ‘copy_self_proc_exe’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 288, "column": 12, "event": "note", "message": "(58) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 291, "column": 13, "event": "note", "message": "(59) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c", "line": 291, "column": 12, "event": "note", "message": "(60) ‘parse_proc_stringlist(\"/proc/self/cmdline\")’ leaks here; was allocated at (36)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 289| \t\treturn fd;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 290| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 291|-> \tif (fexecve(fd, argv, environ) == -1) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 292| \t\tclose(fd);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 293| \t\tfprintf(stderr, \"Error during reexec(...): %m\\n\");", "verbosity_level": 1 } ] }, { "checker": "COMPILER_WARNING", "language": "c/c++", "tool": "gcc", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c", "line": 0, "event": "internal warning", "message": "child 5103 timed out after 30s", "verbosity_level": 0 } ] }, { "checker": "CPPCHECK_WARNING", "language": "c/c++", "tool": "cppcheck", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c", "line": 0, "event": "internal warning", "message": "child 5104 timed out after 30s", "verbosity_level": 0 } ] }, { "checker": "COMPILER_WARNING", "cwe": 1164, "language": "c/c++", "tool": "gcc", "hash_v1": "1653019d736065449675558bc45ff3c107a2c59c", "key_event_idx": 0, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3.go", "line": 85, "column": 1, "event": "warning[-Wunused-function]", "message": "‘_sqlite3_exec’ defined but not used", "verbosity_level": 0 }, { "file_name": "", "line": 0, "event": "#", "message": " 85 | _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " | ^~~~~~~~~~~~~", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 83| ", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 84| static int", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 85|-> _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 86| {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 87| int rv = sqlite3_exec(db, pcmd, 0, 0, 0);", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 476, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "0355375c762864403c43a77bf2c8a68dfde4a5f5", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 0, "event": "scope_hint", "message": "In function 'New'", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 77, "column": 19, "event": "warning[-Wanalyzer-possible-null-dereference]", "message": "dereference of possibly-NULL 'c'", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 76, "column": 25, "event": "note", "message": "(1) this call could return NULL", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 77, "column": 19, "event": "note", "message": "(2) 'c' could be NULL: unchecked value from (1)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 75| \tCK_C_GetFunctionList list;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 76| \tstruct ctx *c = calloc(1, sizeof(struct ctx));", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 77|-> \tc->handle = dlopen(module, RTLD_LAZY);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 78| \tif (c->handle == NULL) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 79| \t\tfree(c);", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 476, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "0cc6a9d7c06f16ee2fc2af3042bcef3b0d79f87c", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 0, "event": "scope_hint", "message": "In function ‘New’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 77, "column": 19, "event": "warning[-Wanalyzer-possible-null-dereference]", "message": "dereference of possibly-NULL ‘c’", "verbosity_level": 0 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 76, "column": 25, "event": "note", "message": "(1) this call could return NULL", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 77, "column": 19, "event": "note", "message": "(2) ‘c’ could be NULL: unchecked value from (1)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 75| \tCK_C_GetFunctionList list;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 76| \tstruct ctx *c = calloc(1, sizeof(struct ctx));", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 77|-> \tc->handle = dlopen(module, RTLD_LAZY);", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 78| \tif (c->handle == NULL) {", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 79| \t\tfree(c);", "verbosity_level": 1 } ] }, { "checker": "GCC_ANALYZER_WARNING", "cwe": 401, "language": "c/c++", "tool": "gcc-analyzer", "hash_v1": "1f2dae49315476fc3140813dd019081eb4bae4c5", "key_event_idx": 1, "events": [ { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 0, "event": "scope_hint", "message": "In function ‘GetAttributeValue.part.0’", "verbosity_level": 1 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 316, "column": 32, "event": "warning[-Wanalyzer-malloc-leak]", "message": "leak of ‘*((CK_ATTRIBUTE *)temp).pValue’", "verbosity_level": 0 }, { "file_name": "cgo-gcc-prolog", "line": 684, "column": 1, "event": "note", "message": "(1) entry to ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’", "verbosity_level": 2 }, { "file_name": "cgo-gcc-prolog", "line": 697, "column": 11, "event": "note", "message": "(2) calling ‘GetAttributeValue’ from ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 300, "column": 7, "event": "note", "message": "(3) entry to ‘GetAttributeValue’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 307, "column": 12, "event": "note", "message": "(4) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(5) ...to here", "verbosity_level": 2 }, { "file_name": "cc1", "line": 0, "event": "note", "message": "(6) calling ‘GetAttributeValue.part.0’ from ‘GetAttributeValue’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 300, "column": 7, "event": "note", "message": "(7) entry to ‘GetAttributeValue.part.0’", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 311, "column": 23, "event": "note", "message": "(8) following ‘true’ branch (when ‘i < templen’)...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 312, "column": 35, "event": "note", "message": "(9) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 312, "column": 20, "event": "note", "message": "(10) following ‘false’ branch...", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 316, "column": 34, "event": "note", "message": "(11) ...to here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 316, "column": 34, "event": "note", "message": "(12) allocated here", "verbosity_level": 2 }, { "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go", "line": 316, "column": 32, "event": "note", "message": "(13) ‘*((CK_ATTRIBUTE *)temp).pValue’ leaks here; was allocated at (12)", "verbosity_level": 2 }, { "file_name": "", "line": 0, "event": "#", "message": " 314| \t\t\tcontinue;", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 315| \t\t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 316|-> \t\ttemp[i].pValue = calloc(temp[i].ulValueLen, sizeof(CK_BYTE));", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 317| \t}", "verbosity_level": 1 }, { "file_name": "", "line": 0, "event": "#", "message": " 318| \treturn c->sym->C_GetAttributeValue(session, object, temp, templen);", "verbosity_level": 1 } ] } ] }