Task #335 - crun-1.15-1.fc41/scan.log
back to task #335download
<...trimmed, download required for full log> mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_int.lo -MD -MP -MF src/ocispec/.deps/basic_test_top_double_array_int.Tpo -c src/ocispec/basic_test_top_double_array_int.c -o src/ocispec/basic_test_top_double_array_int.o /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:31: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:35: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:31:14: warning: Potential leak of memory pointed to by 'ptr' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:122:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:15: warning: leak of 'make_basic_test_top_double_array_int_container(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:176:46: note: (1) entry to 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:182:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:185:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:190:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (6) calling 'make_basic_test_top_double_array_int_container' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (12) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (13) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:32:14: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:34:8: note: (18) following 'false' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: note: (20) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (22) returning to 'basic_test_top_double_array_int_container_parse_data' from 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:15: note: (23) 'make_basic_test_top_double_array_int_container(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' leaks here; was allocated at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:15: warning: leak of 'basic_test_top_double_array_int_container_parse_data(fread_file(stream, & filesize), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:156:1: note: (1) entry to 'basic_test_top_double_array_int_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:161:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:164:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:166:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (6) calling 'basic_test_top_double_array_int_container_parse_data' from 'basic_test_top_double_array_int_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:176:46: note: (7) entry to 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:182:8: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:185:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:190:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (12) calling 'make_basic_test_top_double_array_int_container' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:15:2: note: (13) entry to 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:9: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:22:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:24:8: note: (16) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (19) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:32:14: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:34:8: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: note: (26) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (28) returning to 'basic_test_top_double_array_int_container_parse_data' from 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:178:97: note: (29) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:8: <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_int_container_parse_data' at src/ocispec/basic_test_top_double_array_int.c:178:97: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:36: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (32) returning to 'basic_test_top_double_array_int_container_parse_file_stream' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:15: note: (33) 'basic_test_top_double_array_int_container_parse_data(fread_file(stream, & filesize), ctx, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:176:46: note: (1) entry to 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:182:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:185:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:190:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (6) calling 'make_basic_test_top_double_array_int_container' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (15) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:32:14: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:34:8: note: (18) following 'false' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: note: (20) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (22) returning to 'basic_test_top_double_array_int_container_parse_data' from 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: note: (23) '<unknown>' leaks here; was allocated at (14) <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_int_container_parse_data' at src/ocispec/basic_test_top_double_array_int.c:178:97: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:36: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:156:1: note: (1) entry to 'basic_test_top_double_array_int_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:161:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:164:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:166:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (6) calling 'basic_test_top_double_array_int_container_parse_data' from 'basic_test_top_double_array_int_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:176:46: note: (7) entry to 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:182:8: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:185:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:190:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (12) calling 'make_basic_test_top_double_array_int_container' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:15:2: note: (13) entry to 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:20:9: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:22:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:24:8: note: (16) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:26:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:27:8: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:29:18: note: (20) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (21) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:30:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:32:14: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:34:8: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:37:19: note: (26) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:196:7: note: (28) returning to 'basic_test_top_double_array_int_container_parse_data' from 'make_basic_test_top_double_array_int_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:178:97: note: (29) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_int_container_parse_data' at src/ocispec/basic_test_top_double_array_int.c:178:97: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:36: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c: In function 'basic_test_top_double_array_int_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:171:7: note: (32) returning to 'basic_test_top_double_array_int_container_parse_file_stream' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:178:97: note: (33) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_int_container_parse_data' <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_int_container_parse_data' at src/ocispec/basic_test_top_double_array_int.c:178:97: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_int.c:174:36: note: (34) '<unknown>' leaks here; was allocated at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/runtime_spec_schema_config_linux.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_config_linux.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/runtime_spec_schema_config_linux.lo src/ocispec/runtime_spec_schema_config_linux.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_config_linux.lo -MD -MP -MF src/ocispec/.deps/runtime_spec_schema_config_linux.Tpo -c src/ocispec/runtime_spec_schema_config_linux.c -o src/ocispec/runtime_spec_schema_config_linux.o /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2768: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2771: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2784: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2791: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2797: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c: In function 'make_runtime_spec_schema_config_linux_resources': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:47:13: warning: leak of 'make_runtime_spec_schema_config_linux_resources_pids(get_val(tree, "pids", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2887:1: note: (1) entry to 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2892:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2894:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2895:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2899:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2985:22: note: (6) calling 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1749:1: note: (7) entry to 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1754:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1756:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1757:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1761:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1762:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1779:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1799:17: note: (14) calling 'make_runtime_spec_schema_config_linux_resources_pids' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:14:1: note: (15) entry to 'make_runtime_spec_schema_config_linux_resources_pids' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:19:8: note: (16) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:21:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:21:11: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:22:8: note: (19) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:22:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:26:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:27:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:47:13: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1799:17: note: (24) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_pids' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:47:13: note: (25) 'make_runtime_spec_schema_config_linux_resources_pids(get_val(tree, "pids", 3), ctx, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:309:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2887:1: note: (1) entry to 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2892:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2894:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2895:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2899:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2985:22: note: (6) calling 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1749:1: note: (7) entry to 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1754:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1756:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1757:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1761:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1762:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1779:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:30: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:27: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (18) calling 'make_runtime_spec_schema_config_linux_resources_block_io' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:144:1: note: (19) entry to 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:149:8: note: (20) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:151:11: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:152:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:156:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:157:12: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:178:24: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:179:12: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:200:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:201:12: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:204:20: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:207:45: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:208:16: note: (31) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:208:16: note: (32) following 'false' branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:210:27: note: (34) following 'false' branch (when 'i >= len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:222:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (36) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:309:8: note: (37) '<unknown>' leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:309:13: warning: leak of 'make_runtime_spec_schema_config_linux_resources_block_io(get_val(tree, "blockIO", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2887:1: note: (1) entry to 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2892:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2894:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2895:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2899:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2985:22: note: (6) calling 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1749:1: note: (7) entry to 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1754:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1756:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1757:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1761:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1762:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1779:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:30: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:27: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (18) calling 'make_runtime_spec_schema_config_linux_resources_block_io' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:144:1: note: (19) entry to 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:149:8: note: (20) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:151:11: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:151:11: note: (22) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:152:8: note: (23) assuming 'calloc(1, 104)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:152:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:156:24: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:157:12: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:178:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:179:12: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:200:24: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (30) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:309:13: note: (31) 'make_runtime_spec_schema_config_linux_resources_block_io(get_val(tree, "blockIO", 3), ctx, err)' leaks here; was allocated at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c: In function 'make_runtime_spec_schema_config_linux': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:30: warning: leak of 'make_runtime_spec_schema_config_linux_resources(get_val(tree, "resources", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2887:1: note: (1) entry to 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2892:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2894:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2895:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2899:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2985:22: note: (6) calling 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1749:1: note: (7) entry to 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1754:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1756:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1756:11: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1757:8: note: (11) assuming 'calloc(1, 96)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1757:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1761:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1762:12: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1779:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:8: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:30: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:27: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (20) calling 'make_runtime_spec_schema_config_linux_resources_block_io' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:144:1: note: (21) entry to 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:149:8: note: (22) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:151:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:152:8: note: (24) following 'true' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1802:21: note: (26) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_block_io' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1803:8: note: (27) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1803:34: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1803:31: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1805:16: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1805:16: note: (31) calling 'make_runtime_spec_schema_config_linux_resources_cpu' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:614:1: note: (32) entry to 'make_runtime_spec_schema_config_linux_resources_cpu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:619:8: note: (33) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:621:11: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:622:8: note: (35) following 'true' branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1805:16: note: (37) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_cpu' <--[gcc] /builddir/build/BUILD/crun-1.make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' 15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1806:8: note: (38) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1806:29: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1806:26: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1810:24: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1830:19: note: (42) calling 'make_runtime_spec_schema_config_linux_resources_memory' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1112:1: note: (43) entry to 'make_runtime_spec_schema_config_linux_resources_memory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1117:8: note: (44) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1119:11: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1120:8: note: (46) following 'true' branch... <--[gcc] cc1: note: (47) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1830:19: note: (48) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_memory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1831:8: note: (49) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1831:32: note: (50) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1831:29: note: (51) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1833:20: note: (52) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1833:20: note: (53) calling 'make_runtime_spec_schema_config_linux_resources_network' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1516:1: note: (54) entry to 'make_runtime_spec_schema_config_linux_resources_network' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1521:8: note: (55) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1523:11: note: (56) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1524:8: note: (57) following 'true' branch... <--[gcc] cc1: note: (58) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1833:20: note: (59) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_network' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1834:8: note: (60) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1834:33: note: (61) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1834:30: note: (62) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1836:17: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1836:17: note: (64) calling 'make_runtime_spec_schema_config_linux_resources_rdma' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1707:1: note: (65) entry to 'make_runtime_spec_schema_config_linux_resources_rdma' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1712:8: note: (66) following 'true' branch (when 'tree' is NULL)... <--[gcc] cc1: note: (67) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1836:17: note: (68) returning to 'make_runtime_spec_schema_config_linux_resources' from 'make_runtime_spec_schema_config_linux_resources_rdma' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1837:8: note: (69) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1837:30: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1837:27: note: (71) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1840:13: note: (72) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2985:22: note: (73) returning to 'make_runtime_spec_schema_config_linux' from 'make_runtime_spec_schema_config_linux_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1800:30: note: (74) 'make_runtime_spec_schema_config_linux_resources(get_val(tree, "resources", 3), ctx, err)' leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2253:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2887:1: note: (1) entry to 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2892:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2894:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2895:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2899:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2986:8: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2986:35: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2986:32: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2990:24: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2991:12: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3002:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3003:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3012:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3012:20: note: (14) calling 'make_runtime_spec_schema_config_linux_seccomp' from 'make_runtime_spec_schema_config_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2104:1: note: (15) entry to 'make_runtime_spec_schema_config_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2109:8: note: (16) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2111:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2112:8: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2116:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2117:12: note: (20) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2119:25: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2120:35: note: (22) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2121:16: note: (23) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2121:16: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2128:24: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2129:12: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2150:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2177:12: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2188:24: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2189:12: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2200:24: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2246:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2253:13: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3012:20: note: (34) returning to 'make_runtime_spec_schema_config_linux' from 'make_runtime_spec_schema_config_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:2253:8: note: (35) '<unknown>' leaks here; was allocated at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_linux.c: internal warning: child 8388 timed out after 30s <--[clang] cswrap: error: child 8388 (/usr/bin/clang) terminated by signal 15 (timed out) make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/image_manifest_items_image_manifest_items_schema.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/image_manifest_items_image_manifest_items_schema.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/image_manifest_items_image_manifest_items_schema.lo src/ocispec/image_manifest_items_image_manifest_items_schema.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/image_manifest_items_image_manifest_items_schema.lo -MD -MP -MF src/ocispec/.deps/image_manifest_items_image_manifest_items_schema.Tpo -c src/ocispec/image_manifest_items_image_manifest_items_schema.c -o src/ocispec/image_manifest_items_image_manifest_items_schema.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/runtime_spec_schema_features_schema.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_features_schema.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/runtime_spec_schema_features_schema.lo src/ocispec/runtime_spec_schema_features_schema.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_features_schema.lo -MD -MP -MF src/ocispec/.deps/runtime_spec_schema_features_schema.Tpo -c src/ocispec/runtime_spec_schema_features_schema.c -o src/ocispec/runtime_spec_schema_features_schema.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/read-file.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/read-file.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/read-file.lo src/ocispec/read-file.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/read-file.lo -MD -MP -MF src/ocispec/.deps/read-file.Tpo -c src/ocispec/read-file.c -o src/ocispec/read-file.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/basic_test_top_double_array_refobj.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_refobj.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/basic_test_top_double_array_refobj.lo src/ocispec/basic_test_top_double_array_refobj.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_refobj.lo -MD -MP -MF src/ocispec/.deps/basic_test_top_double_array_refobj.Tpo -c src/ocispec/basic_test_top_double_array_refobj.c -o src/ocispec/basic_test_top_double_array_refobj.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/basic_test_double_array.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_double_array.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/basic_test_double_array.lo src/ocispec/basic_test_double_array.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_double_array.lo -MD -MP -MF src/ocispec/.deps/basic_test_double_array.Tpo -c src/ocispec/basic_test_double_array.c -o src/ocispec/basic_test_double_array.o /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:263: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c: In function 'make_image_manifest_items_image_manifest_items_schema_container': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:106:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:373:63: note: (1) entry to 'image_manifest_items_image_manifest_items_schema_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:379:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:382:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:387:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:393:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:393:7: note: (6) calling 'make_image_manifest_items_image_manifest_items_schema_container' from 'image_manifest_items_image_manifest_items_schema_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:247:2: note: (7) entry to 'make_image_manifest_items_image_manifest_items_schema_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:252:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:254:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:256:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:258:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:259:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:261:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:262:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:264:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:267:19: note: (16) following 'true' branch (when 'i < alen')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:269:55: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:270:25: note: (18) calling 'make_image_manifest_items_image_manifest_items_schema_element' from 'make_image_manifest_items_image_manifest_items_schema_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:14:1: note: (19) entry to 'make_image_manifest_items_image_manifest_items_schema_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:19:8: note: (20) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:21:11: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:22:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:26:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:27:12: note: (24) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:29:25: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:31:16: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:38:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:39:12: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:42:20: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:45:27: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:46:16: note: (31) assuming 'calloc(len + 1, 8)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:46:16: note: (32) following 'false' branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:91:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:100:12: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:100:8: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:106:12: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:106:8: note: (38) following 'false' branch... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:270:25: note: (40) returning to 'make_image_manifest_items_image_manifest_items_schema_container' from 'make_image_manifest_items_image_manifest_items_schema_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:106:8: note: (41) '<unknown>' leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:32:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/image_manifest_items_image_manifest_items_schema.c:263:14: warning: Potential leak of memory pointed to by 'ptr' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c: In function 'runtime_spec_schema_features_schema_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:459:40: note: (1) entry to 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:465:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:468:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:473:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (6) calling 'make_runtime_spec_schema_features_schema' from 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:14:1: note: (7) entry to 'make_runtime_spec_schema_features_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:19:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:21:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:22:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:26:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:27:12: note: (12) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:29:25: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:30:36: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:31:16: note: (15) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:31:16: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:38:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:39:12: note: (18) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:41:25: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:43:16: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:50:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:103:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:120:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:147:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:13: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (28) returning to 'runtime_spec_schema_features_schema_parse_data' from 'make_runtime_spec_schema_features_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:8: note: (29) '<unknown>' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c: In function 'make_runtime_spec_schema_features_schema': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:459:40: note: (1) entry to 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:465:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:468:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:473:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (6) calling 'make_runtime_spec_schema_features_schema' from 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:14:1: note: (7) entry to 'make_runtime_spec_schema_features_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:19:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:21:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:22:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:26:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:27:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:29:25: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:31:16: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:38:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:39:12: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:41:25: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:43:16: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:50:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:103:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:120:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:147:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:12: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:13: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:8: note: (26) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:164:16: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:167:12: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:169:20: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:169:20: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:170:16: note: (31) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:170:16: note: (32) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:173:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:175:16: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:180:37: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:181:16: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:188:9: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: note: (38) following 'false' branch... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: note: (40) 'resi' leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:459:40: note: (1) entry to 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:465:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:468:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:473:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:479:7: note: (6) calling 'make_runtime_spec_schema_features_schema' from 'runtime_spec_schema_features_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:14:1: note: (7) entry to 'make_runtime_spec_schema_features_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:19:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:21:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:22:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:26:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:27:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:29:25: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:31:16: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:38:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:39:12: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:41:25: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:43:16: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:50:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:103:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:120:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:147:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:12: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:153:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:13: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:160:8: note: (26) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:164:16: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:167:12: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:169:20: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:170:16: note: (30) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:173:24: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:174:35: note: (32) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:175:16: note: (33) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:175:16: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:180:37: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:181:16: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:188:9: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: note: (38) following 'false' branch... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:212:12: note: (40) '<unknown>' leaks here; was allocated at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:32:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_schema.c:178:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:31: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:35: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:31:14: warning: Potential leak of memory pointed to by 'ptr' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:114:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:15: warning: leak of 'make_basic_test_top_double_array_refobj_container(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:168:49: note: (1) entry to 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:174:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:177:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:182:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (6) calling 'make_basic_test_top_double_array_refobj_container' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (12) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (13) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:32:14: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (18) following 'false' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: note: (20) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (22) returning to 'basic_test_top_double_array_refobj_container_parse_data' from 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:15: note: (23) 'make_basic_test_top_double_array_refobj_container(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' leaks here; was allocated at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:15: warning: leak of 'basic_test_top_double_array_refobj_container_parse_data(fread_file(stream, & filesize), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:148:1: note: (1) entry to 'basic_test_top_double_array_refobj_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:153:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:156:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:158:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (6) calling 'basic_test_top_double_array_refobj_container_parse_data' from 'basic_test_top_double_array_refobj_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:168:49: note: (7) entry to 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:174:8: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:177:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:182:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (12) calling 'make_basic_test_top_double_array_refobj_container' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:15:2: note: (13) entry to 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:9: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:22:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:24:8: note: (16) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (19) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:32:14: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: note: (26) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (28) returning to 'basic_test_top_double_array_refobj_container_parse_data' from 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:170:100: note: (29) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:8: <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_refobj_container_parse_data' at src/ocispec/basic_test_top_double_array_refobj.c:170:100: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:36: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (32) returning to 'basic_test_top_double_array_refobj_container_parse_file_stream' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:15: note: (33) 'basic_test_top_double_array_refobj_container_parse_data(fread_file(stream, & filesize), ctx, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:168:49: note: (1) entry to 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:174:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:177:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:182:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (6) calling 'make_basic_test_top_double_array_refobj_container' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (15) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:32:14: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (18) following 'false' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: note: (20) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (22) returning to 'basic_test_top_double_array_refobj_container_parse_data' from 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: note: (23) '<unknown>' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'free_basic_test_top_double_array_refobj_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:69:44: warning: dereference of NULL '*ptr.subitem_lens + i * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:168:49: note: (1) entry to 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:174:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:177:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:182:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (6) calling 'make_basic_test_top_double_array_refobj_container' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:32:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:33:25: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (17) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:17:117: note: (20) inlined call to 'free_basic_test_top_double_array_refobj_container_function' from 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:13:74: note: (21) inlined call to 'free_basic_test_top_double_array_refobj_container' from 'free_basic_test_top_double_array_refobj_container_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_basic_test_top_double_array_refobj_container', inlined from 'free_basic_test_top_double_array_refobj_container_function' at src/ocispec/basic_test_top_double_array_refobj.c:13:1, inlined from 'make_basic_test_top_double_array_refobj_container' at src/ocispec/basic_test_top_double_array_refobj.c:17:117: cc1: note: (22) calling 'free_basic_test_top_double_array_refobj_container.part.0' from 'make_basic_test_top_double_array_refobj_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'free_basic_test_top_double_array_refobj_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:59:6: note: (23) entry to 'free_basic_test_top_double_array_refobj_container.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:66:19: note: (24) following 'true' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:69:44: note: (26) dereference of NULL '*ptr.subitem_lens + i * 8' <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_refobj_container_parse_data' at src/ocispec/basic_test_top_double_array_refobj.c:170:100: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:36: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:148:1: note: (1) entry to 'basic_test_top_double_array_refobj_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:153:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:156:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:158:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (6) calling 'basic_test_top_double_array_refobj_container_parse_data' from 'basic_test_top_double_array_refobj_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:168:49: note: (7) entry to 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:174:8: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:177:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:182:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (12) calling 'make_basic_test_top_double_array_refobj_container' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:15:2: note: (13) entry to 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:20:9: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:22:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:24:8: note: (16) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:26:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:27:8: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:29:18: note: (20) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (21) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:30:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:32:14: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:34:8: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:37:19: note: (26) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:188:7: note: (28) returning to 'basic_test_top_double_array_refobj_container_parse_data' from 'make_basic_test_top_double_array_refobj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:170:100: note: (29) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_refobj_container_parse_data' at src/ocispec/basic_test_top_double_array_refobj.c:170:100: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:36: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c: In function 'basic_test_top_double_array_refobj_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:163:7: note: (32) returning to 'basic_test_top_double_array_refobj_container_parse_file_stream' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:170:100: note: (33) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_refobj_container_parse_data' <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_refobj_container_parse_data' at src/ocispec/basic_test_top_double_array_refobj.c:170:100: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_refobj.c:166:36: note: (34) '<unknown>' leaks here; was allocated at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/runtime_spec_schema_config_schema.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_config_schema.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/runtime_spec_schema_config_schema.lo src/ocispec/runtime_spec_schema_config_schema.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_config_schema.lo -MD -MP -MF src/ocispec/.deps/runtime_spec_schema_config_schema.Tpo -c src/ocispec/runtime_spec_schema_config_schema.c -o src/ocispec/runtime_spec_schema_config_schema.o /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c: In function 'make_basic_test_double_array': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:46:12: warning: leak of 'make_basic_test_double_array_objectarrays_element(*<unknown>, ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:683:28: note: (1) entry to 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:689:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:692:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:697:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (6) calling 'make_basic_test_double_array' from 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:110:1: note: (7) entry to 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:115:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:122:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:243:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:246:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:250:16: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:252:43: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:253:16: note: (16) following 'false' branch... <--[gcc] cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:255:27: note: (18) following 'true' branch (when 'i < len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:257:38: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:260:20: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:262:27: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:263:31: note: (22) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:103: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:47: note: (24) calling 'make_basic_test_double_array_objectarrays_element' from 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:14:1: note: (25) entry to 'make_basic_test_double_array_objectarrays_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:19:8: note: (26) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:21:11: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:21:11: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:22:8: note: (29) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:22:8: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:26:24: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:27:12: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:34:19: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:35:16: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:45:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:46:12: note: (36) following 'false' branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:47: note: (38) returning to 'make_basic_test_double_array' from 'make_basic_test_double_array_objectarrays_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:46:12: note: (39) 'make_basic_test_double_array_objectarrays_element(*<unknown>, ctx, err)' leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:50:16: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:683:28: note: (1) entry to 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:689:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:692:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:697:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (6) calling 'make_basic_test_double_array' from 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:110:1: note: (7) entry to 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:115:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:122:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:243:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:246:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:250:16: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:252:43: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:253:16: note: (16) following 'false' branch... <--[gcc] cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:255:27: note: (18) following 'true' branch (when 'i < len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:257:38: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:260:20: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:262:27: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:263:31: note: (22) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:103: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:47: note: (24) calling 'make_basic_test_double_array_objectarrays_element' from 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:14:1: note: (25) entry to 'make_basic_test_double_array_objectarrays_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:19:8: note: (26) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:21:11: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:22:8: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:26:24: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:27:12: note: (30) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:29:26: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:46:12: note: (32) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:48:25: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:49:27: note: (34) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:50:16: note: (35) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:50:16: note: (36) following 'false' branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:265:47: note: (38) returning to 'make_basic_test_double_array' from 'make_basic_test_double_array_objectarrays_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:50:16: note: (39) '<unknown>' leaks here; was allocated at (34) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c: In function 'basic_test_double_array_parse_data': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:309:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:683:28: note: (1) entry to 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:689:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:692:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:697:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (6) calling 'make_basic_test_double_array' from 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:110:1: note: (7) entry to 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:115:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:122:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:123:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:126:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:129:30: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:130:16: note: (15) assuming 'calloc(len + 1, 8)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:130:16: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:132:40: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:133:16: note: (18) following 'false' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:135:27: note: (20) following 'false' branch (when 'i >= len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:160:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (22) returning to 'basic_test_double_array_parse_data' from 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:309:8: note: (23) '<unknown>' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:309:13: warning: leak of 'make_basic_test_double_array(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:683:28: note: (1) entry to 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:689:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:692:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:697:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (6) calling 'make_basic_test_double_array' from 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:110:1: note: (7) entry to 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:115:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (11) assuming 'calloc(1, 128)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:122:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (14) returning to 'basic_test_double_array_parse_data' from 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:309:13: note: (15) 'make_basic_test_double_array(yajl_tree_parse(jsondata, & errbuf, 1024), ctx, err)' leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c: In function 'free_basic_test_double_array': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:376:53: warning: dereference of NULL '*ptr.strarrays_item_lens + i * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:683:28: note: (1) entry to 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:689:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:692:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:697:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:703:7: note: (6) calling 'make_basic_test_double_array' from 'basic_test_double_array_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:110:1: note: (7) entry to 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:115:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:117:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:118:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:122:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:123:12: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:126:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:130:16: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:132:40: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:132:40: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:133:16: note: (17) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:133:16: note: (18) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:112:75: note: (19) inlined call to 'free_basic_test_double_array_function' from 'make_basic_test_double_array' <--[gcc] In function 'free_basic_test_double_array_function', inlined from 'make_basic_test_double_array' at src/ocispec/basic_test_double_array.c:112:75: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:108:53: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:108:53: note: (21) calling 'free_basic_test_double_array' from 'make_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c: In function 'free_basic_test_double_array': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:366:1: note: (22) entry to 'free_basic_test_double_array' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:368:8: note: (23) following 'false' branch (when 'ptr' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:370:12: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:370:8: note: (25) following 'true' branch... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:373:23: note: (27) following 'true' branch... <--[gcc] cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:376:53: note: (29) dereference of NULL '*ptr.strarrays_item_lens + i * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:51:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:131:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:327:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:491:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:524:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:557:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:590:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_double_array.c:623:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c: In function 'make_runtime_spec_schema_config_schema': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:157:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (14) calling 'make_runtime_spec_schema_config_schema_hooks' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:14:1: note: (15) entry to 'make_runtime_spec_schema_config_schema_hooks' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:19:8: note: (16) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:21:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:22:8: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:26:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:27:12: note: (20) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:30:20: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:33:29: note: (22) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:34:16: note: (23) assuming 'calloc(len + 1, 8)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:34:16: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:36:27: note: (26) following 'false' branch (when 'i >= len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:48:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (28) returning to 'make_runtime_spec_schema_config_schema' from 'make_runtime_spec_schema_config_schema_hooks' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:157:8: note: (29) '<unknown>' leaks here; was allocated at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:157:13: warning: leak of 'make_runtime_spec_schema_config_schema_hooks(get_val(tree, "hooks", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (14) calling 'make_runtime_spec_schema_config_schema_hooks' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:14:1: note: (15) entry to 'make_runtime_spec_schema_config_schema_hooks' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:19:8: note: (16) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:21:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:21:11: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:22:8: note: (19) assuming 'calloc(1, 104)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:22:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:26:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (22) returning to 'make_runtime_spec_schema_config_schema' from 'make_runtime_spec_schema_config_schema_hooks' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:157:13: note: (23) 'make_runtime_spec_schema_config_schema_hooks(get_val(tree, "hooks", 3), ctx, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:523:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2870:17: note: (24) calling 'make_runtime_spec_schema_config_schema_root' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:475:1: note: (25) entry to 'make_runtime_spec_schema_config_schema_root' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:480:8: note: (26) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:482:11: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:483:8: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:487:24: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:488:12: note: (30) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:490:25: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:491:25: note: (32) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:492:16: note: (33) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:492:16: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:499:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:500:12: note: (36) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:502:29: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:516:8: note: (38) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:523:13: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2870:17: note: (40) returning to 'make_runtime_spec_schema_config_schema' from 'make_runtime_spec_schema_config_schema_root' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:523:8: note: (41) '<unknown>' leaks here; was allocated at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c: In function 'make_runtime_spec_schema_config_schema_process': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:691:13: warning: leak of 'make_runtime_spec_schema_config_schema_process_console_size(get_val(tree, "consoleSize", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:8: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:30: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:27: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (28) calling 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2188:1: note: (29) entry to 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2193:8: note: (30) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2195:11: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2196:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2200:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2227:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (36) calling 'make_runtime_spec_schema_config_schema_process_console_size' from 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:636:1: note: (37) entry to 'make_runtime_spec_schema_config_schema_process_console_size' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:641:8: note: (38) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:643:11: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:643:11: note: (40) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:644:8: note: (41) assuming 'calloc(1, 32)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:644:8: note: (42) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:648:24: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:649:12: note: (44) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:670:24: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:671:12: note: (46) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:691:13: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (48) returning to 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema_process_console_size' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:691:13: note: (49) 'make_runtime_spec_schema_config_schema_process_console_size(get_val(tree, "consoleSize", 3), ctx, err)' leaks here; was allocated at (40) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:8: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:30: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:27: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (28) calling 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2188:1: note: (29) entry to 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2193:8: note: (30) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2195:11: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2196:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2200:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2227:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:8: note: (36) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:38: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:35: note: (38) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2241:24: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2242:12: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2253:24: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2280:12: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2282:29: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2296:17: note: (44) calling 'make_runtime_spec_schema_config_schema_process_user' from 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:801:1: note: (45) entry to 'make_runtime_spec_schema_config_schema_process_user' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:806:8: note: (46) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:808:11: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:809:8: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:813:24: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:814:12: note: (50) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:835:24: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:836:12: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:857:24: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:858:12: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:879:24: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:880:12: note: (56) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:883:20: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:886:36: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:887:16: note: (59) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:887:16: note: (60) following 'false' branch... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:915:12: note: (62) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:13: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2296:17: note: (64) returning to 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema_process_user' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:8: note: (65) '<unknown>' leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:13: warning: leak of 'make_runtime_spec_schema_config_schema_process_user(get_val(tree, "user", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:8: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:30: note: (25) ...to here <--[gcc] /buimake[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/runtime_spec_schema_defs_linux.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_defs_linux.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/runtime_spec_schema_defs_linux.lo src/ocispec/runtime_spec_schema_defs_linux.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_defs_linux.lo -MD -MP -MF src/ocispec/.deps/runtime_spec_schema_defs_linux.Tpo -c src/ocispec/runtime_spec_schema_defs_linux.c -o src/ocispec/runtime_spec_schema_defs_linux.o lddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:27: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (28) calling 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2188:1: note: (29) entry to 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2193:8: note: (30) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2195:11: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2196:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2200:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2227:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:8: note: (36) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:38: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:35: note: (38) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2241:24: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2242:12: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2253:24: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2280:12: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2282:29: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2296:17: note: (44) calling 'make_runtime_spec_schema_config_schema_process_user' from 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:801:1: note: (45) entry to 'make_runtime_spec_schema_config_schema_process_user' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:806:8: note: (46) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:808:11: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:808:11: note: (48) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:809:8: note: (49) assuming 'calloc(1, 56)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:809:8: note: (50) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:813:24: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:814:12: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:835:24: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:836:12: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:857:24: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:858:12: note: (56) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:879:24: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:915:12: note: (58) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:13: note: (59) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2296:17: note: (60) returning to 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema_process_user' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:925:13: note: (61) 'make_runtime_spec_schema_config_schema_process_user(get_val(tree, "user", 3), ctx, err)' leaks here; was allocated at (48) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1234:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:8: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:30: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:27: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (28) calling 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2188:1: note: (29) entry to 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2193:8: note: (30) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2195:11: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2196:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2200:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2227:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:8: note: (36) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:38: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:35: note: (38) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2241:24: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2242:12: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2253:24: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2280:12: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2282:29: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:8: note: (44) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:30: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:27: note: (46) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (48) calling 'make_runtime_spec_schema_config_schema_process_capabilities' from 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1093:1: note: (49) entry to 'make_runtime_spec_schema_config_schema_process_capabilities' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1098:8: note: (50) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1100:11: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1101:8: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1105:24: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1106:12: note: (54) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1109:20: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1112:29: note: (56) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1113:16: note: (57) assuming 'calloc(len + 1, 8)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1113:16: note: (58) following 'false' branch... <--[gcc] cc1: note: (59) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (60) returning to 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema_process_capabilities' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1234:8: note: (61) '<unknown>' leaks here; was allocated at (56) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1234:13: warning: leak of 'make_runtime_spec_schema_config_schema_process_capabilities(get_val(tree, "capabilities", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3236:38: note: (1) entry to 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3242:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3245:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3250:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:3256:7: note: (6) calling 'make_runtime_spec_schema_config_schema' from 'runtime_spec_schema_config_schema_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2781:1: note: (7) entry to 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2786:8: note: (8) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2788:11: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2789:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2793:24: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2794:12: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2803:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:8: note: (14) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:31: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2804:28: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2808:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2809:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2826:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2827:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2838:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2839:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2850:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:8: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:30: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2871:27: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2873:20: note: (28) calling 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2188:1: note: (29) entry to 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2193:8: note: (30) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2195:11: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2196:8: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2200:24: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2227:12: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2236:25: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:8: note: (36) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:38: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2237:35: note: (38) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2241:24: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2242:12: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2253:24: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2280:12: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2282:29: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:8: note: (44) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:30: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2297:27: note: (46) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (48) calling 'make_runtime_spec_schema_config_schema_process_capabilities' from 'make_runtime_spec_schema_config_schema_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1093:1: note: (49) entry to 'make_runtime_spec_schema_config_schema_process_capabilities' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1098:8: note: (50) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1100:11: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1100:11: note: (52) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1101:8: note: (53) assuming 'calloc(1, 88)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1101:8: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1105:24: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:2299:25: note: (56) returning to 'make_runtime_spec_schema_config_schema_process' from 'make_runtime_spec_schema_config_schema_process_capabilities' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c:1234:13: note: (57) 'make_runtime_spec_schema_config_schema_process_capabilities(get_val(tree, "capabilities", 3), ctx, err)' leaks here; was allocated at (52) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.c: internal warning: child 8471 timed out after 30s <--[clang] cswrap: error: child 8471 (/usr/bin/clang) terminated by signal 15 (timed out) /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_syscall': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:297:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:435:1: note: (1) entry to 'make_runtime_spec_schema_defs_linux_syscall' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:440:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:442:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:443:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:447:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:474:12: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:485:24: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:486:12: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:507:24: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:508:12: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:511:20: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:515:16: note: (12) following 'false' branch... <--[gcc] cc1: note: (13) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:517:27: note: (14) following 'true' branch (when 'i < len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:519:38: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:520:32: note: (16) calling 'make_runtime_spec_schema_defs_linux_syscall_arg' from 'make_runtime_spec_schema_defs_linux_syscall' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:202:1: note: (17) entry to 'make_runtime_spec_schema_defs_linux_syscall_arg' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:207:8: note: (18) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:209:11: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:210:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:214:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:215:12: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:236:24: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:237:12: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:258:24: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:259:12: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:280:24: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:281:12: note: (28) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:283:25: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:284:23: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:285:16: note: (31) assuming '<unknown>' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:285:16: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:290:12: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:290:8: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:297:13: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:520:32: note: (36) returning to 'make_runtime_spec_schema_defs_linux_syscall' from 'make_runtime_spec_schema_defs_linux_syscall_arg' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:297:8: note: (37) '<unknown>' leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_syscall_arg': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:346:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:207:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:209:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:210:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:214:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:281:12: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:283:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:285:16: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:290:12: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:290:8: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:297:13: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:297:8: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:301:16: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:304:12: note: (13) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:306:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:306:20: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:307:16: note: (16) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:307:16: note: (17) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:310:24: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:312:16: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:317:37: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:318:16: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:325:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:325:23: note: (23) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:326:38: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:326:15: note: (25) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:327:20: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:327:17: note: (27) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:328:20: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:328:17: note: (29) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:329:20: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:329:17: note: (31) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:330:20: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:330:20: note: (33) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:332:35: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:325:23: note: (35) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:341:26: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:346:12: note: (37) following 'false' branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:346:12: note: (39) 'resi' leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_block_io_device': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1169:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1072:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1074:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1075:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1079:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1102:12: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1122:13: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1122:8: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1126:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1129:12: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1131:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1131:20: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1132:16: note: (12) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1132:16: note: (13) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1135:24: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1137:16: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1142:37: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1143:16: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1150:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1150:23: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1151:38: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1151:15: note: (21) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1152:20: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1152:17: note: (23) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1153:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1153:20: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1155:35: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1150:23: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1164:26: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1169:12: note: (29) following 'false' branch... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1169:12: note: (31) 'resi' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_block_io_device_weight': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1380:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1237:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1239:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1240:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1244:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1311:12: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1331:13: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1331:8: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1335:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1338:12: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1340:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1340:20: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1341:16: note: (12) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1341:16: note: (13) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1344:24: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1346:16: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1351:37: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1352:16: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1359:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1359:23: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1360:38: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1360:15: note: (21) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1361:20: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1361:17: note: (23) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1362:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1362:17: note: (25) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1363:20: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1363:17: note: (27) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1364:20: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1364:20: note: (29) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1366:35: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1359:23: note: (31) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1375:26: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1380:12: note: (33) following 'false' branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1380:12: note: (35) 'resi' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_block_io_device_throttle': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1592:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1472:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1474:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1475:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1479:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1524:12: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1544:13: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1544:8: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1548:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1551:12: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1553:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1553:20: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1554:16: note: (12) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1554:16: note: (13) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1557:24: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1559:16: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1564:37: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1565:16: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1572:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1572:23: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1573:38: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1573:15: note: (21) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1574:20: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1574:17: note: (23) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1575:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1575:17: note: (25) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1576:20: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1576:20: note: (27) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1578:35: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1572:23: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1587:26: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1592:12: note: (31) following 'false' branch... <--[gcc] cc1: note: (32) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1592:12: note: (33) 'resi' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_network_interface_priority': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2017:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1924:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1926:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1927:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1931:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1932:12: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1934:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1936:16: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1943:24: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1944:12: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1963:12: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1963:8: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1970:13: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1970:8: note: (13) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1974:16: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1977:12: note: (15) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1979:20: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1979:20: note: (17) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1980:16: note: (18) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1980:16: note: (19) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1983:24: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1985:16: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1990:37: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1991:16: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1998:9: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1998:23: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1999:38: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1999:15: note: (27) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2000:20: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2000:17: note: (29) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2001:20: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2001:20: note: (31) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2003:35: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2017:12: note: (33) following 'false' branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2017:12: note: (35) 'resi' leaks here; was allocated at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_rdma': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2184:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2087:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2089:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2090:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2094:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2117:12: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2137:13: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2137:8: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2141:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2144:12: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2146:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2146:20: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2147:16: note: (12) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2147:16: note: (13) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2150:24: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2152:16: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2157:37: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2158:16: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2165:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2165:23: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2166:38: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2166:15: note: (21) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2167:20: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2167:17: note: (23) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2168:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2168:20: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2170:35: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2165:23: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2179:26: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2184:12: note: (29) following 'false' branch... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2184:12: note: (31) 'resi' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_namespace_reference': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2335:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2252:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2254:11: make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/runtime_spec_schema_features_linux.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_features_linux.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/runtime_spec_schema_features_linux.lo src/ocispec/runtime_spec_schema_features_linux.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/runtime_spec_schema_features_linux.lo -MD -MP -MF src/ocispec/.deps/runtime_spec_schema_features_linux.Tpo -c src/ocispec/runtime_spec_schema_features_linux.c -o src/ocispec/runtime_spec_schema_features_linux.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/basic_test_top_double_array_obj.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_obj.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/basic_test_top_double_array_obj.lo src/ocispec/basic_test_top_double_array_obj.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_obj.lo -MD -MP -MF src/ocispec/.deps/basic_test_top_double_array_obj.Tpo -c src/ocispec/basic_test_top_double_array_obj.c -o src/ocispec/basic_test_top_double_array_obj.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/basic_test_top_double_array_string.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_string.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/basic_test_top_double_array_string.lo src/ocispec/basic_test_top_double_array_string.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/basic_test_top_double_array_string.lo -MD -MP -MF src/ocispec/.deps/basic_test_top_double_array_string.Tpo -c src/ocispec/basic_test_top_double_array_string.c -o src/ocispec/basic_test_top_double_array_string.o note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2255:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2259:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2260:12: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2262:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2264:16: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2271:24: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2272:12: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2281:12: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2281:8: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2288:13: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2288:8: note: (13) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2292:16: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2295:12: note: (15) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2297:20: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2297:20: note: (17) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2298:16: note: (18) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2298:16: note: (19) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2301:24: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2303:16: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2308:37: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2309:16: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2316:9: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2316:23: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2317:38: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2317:15: note: (27) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2318:20: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2318:17: note: (29) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2319:20: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2319:20: note: (31) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2321:35: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2335:12: note: (33) following 'false' branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2335:12: note: (35) 'resi' leaks here; was allocated at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c: In function 'make_runtime_spec_schema_defs_linux_time_offsets': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2504:12: warning: leak of 'resi' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2407:8: note: (1) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2409:11: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2410:8: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2414:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2437:12: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2457:13: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2457:8: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2461:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2464:12: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2466:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2466:20: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2467:16: note: (12) assuming 'resi' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2467:16: note: (13) following 'false' branch (when 'resi' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2470:24: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2472:16: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2477:37: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2478:16: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2485:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2485:23: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2486:38: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2486:15: note: (21) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2487:20: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2487:17: note: (23) following 'true' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2488:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2488:20: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2490:35: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2485:23: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2499:26: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2504:12: note: (29) following 'false' branch... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2504:12: note: (31) 'resi' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:32:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:81:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:220:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:315:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:491:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:558:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:749:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:906:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1085:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1140:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1250:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1349:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1485:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1562:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1716:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1783:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1965:13: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:1988:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2100:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2155:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2283:13: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2306:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2420:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_defs_linux.c:2475:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1256: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1269: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1276: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1282: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c: In function 'make_runtime_spec_schema_features_linux': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:434:8: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1357:1: note: (1) entry to 'make_runtime_spec_schema_features_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1362:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1364:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1365:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1369:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:8: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:32: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:29: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (10) calling 'make_runtime_spec_schema_features_linux_seccomp' from 'make_runtime_spec_schema_features_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:274:1: note: (11) entry to 'make_runtime_spec_schema_features_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:279:8: note: (12) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:281:11: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:282:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:286:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:287:12: note: (16) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:289:28: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:306:12: note: (18) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:309:20: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:312:28: note: (20) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:313:16: note: (21) assuming 'calloc(len + 1, 8)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:313:16: note: (22) following 'false' branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (24) returning to 'make_runtime_spec_schema_features_linux' from 'make_runtime_spec_schema_features_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:434:8: note: (25) '<unknown>' leaks here; was allocated at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:434:13: warning: leak of 'make_runtime_spec_schema_features_linux_seccomp(get_val(tree, "seccomp", 3), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1357:1: note: (1) entry to 'make_runtime_spec_schema_features_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1362:8: note: (2) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1364:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1365:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1369:24: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:8: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:32: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1420:29: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (10) calling 'make_runtime_spec_schema_features_linux_seccomp' from 'make_runtime_spec_schema_features_linux' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:274:1: note: (11) entry to 'make_runtime_spec_schema_features_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:279:8: note: (12) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:281:11: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:281:11: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:282:8: note: (15) assuming 'calloc(1, 104)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:282:8: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:286:24: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:287:12: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:294:19: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:295:16: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:305:24: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1422:20: note: (22) returning to 'make_runtime_spec_schema_features_linux' from 'make_runtime_spec_schema_features_linux_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:434:13: note: (23) 'make_runtime_spec_schema_features_linux_seccomp(get_val(tree, "seccomp", 3), ctx, err)' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:131:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:138:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:314:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:452:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:773:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:780:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:901:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:908:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1029:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1036:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1157:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1164:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1256:14: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1276:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1378:22: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_features_linux.c:1456:17: warning: Potential leak of memory pointed to by 'resi' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:161: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:165: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c: In function 'make_basic_test_top_double_array_obj_container': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:68:12: warning: leak of 'make_basic_test_top_double_array_obj_element(*<unknown>, ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:298:46: note: (1) entry to 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:304:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:307:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:312:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (6) calling 'make_basic_test_top_double_array_obj_container' from 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:145:2: note: (7) entry to 'make_basic_test_top_double_array_obj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:150:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:152:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:154:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:156:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:157:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:159:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:160:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:162:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:164:8: note: (16) following 'false' branch... <--[gcc] cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:167:19: note: (18) following 'true' branch (when 'i < alen')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:169:55: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:172:12: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:174:19: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:175:23: note: (22) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:177:84: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:177:34: note: (24) calling 'make_basic_test_top_double_array_obj_element' from 'make_basic_test_top_double_array_obj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:14:1: note: (25) entry to 'make_basic_test_top_double_array_obj_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:19:8: note: (26) following 'false' branch (when 'tree' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:21:11: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:21:11: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:22:8: note: (29) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:22:8: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:26:24: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:27:12: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:34:19: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:35:16: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:45:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:46:12: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:67:24: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:68:12: note: (38) following 'false' branch... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:177:34: note: (40) returning to 'make_basic_test_top_double_array_obj_container' from 'make_basic_test_top_double_array_obj_element' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:68:12: note: (41) 'make_basic_test_top_double_array_obj_element(*<unknown>, ctx, err)' leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c: In function 'free_basic_test_top_double_array_obj_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:199:44: warning: dereference of NULL '*ptr.subitem_lens + i * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:298:46: note: (1) entry to 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:304:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:307:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:312:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (6) calling 'make_basic_test_top_double_array_obj_container' from 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:145:2: note: (7) entry to 'make_basic_test_top_double_array_obj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:150:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:152:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:154:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:156:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:157:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:159:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:160:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:162:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:163:25: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:164:8: note: (17) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:164:8: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:147:111: note: (20) inlined call to 'free_basic_test_top_double_array_obj_container_function' from 'make_basic_test_top_double_array_obj_container' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:8: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:143:71: note: (21) inlined call to 'free_basic_test_top_double_array_obj_container' from 'free_basic_test_top_double_array_obj_container_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_basic_test_top_double_array_obj_container', inlined from 'free_basic_test_top_double_array_obj_container_function' at src/ocispec/basic_test_top_double_array_obj.c:143:1, inlined from 'make_basic_test_top_double_array_obj_container' at src/ocispec/basic_test_top_double_array_obj.c:147:111: cc1: note: (22) calling 'free_basic_test_top_double_array_obj_container.part.0' from 'make_basic_test_top_double_array_obj_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c: In function 'free_basic_test_top_double_array_obj_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:189:6: note: (23) entry to 'free_basic_test_top_double_array_obj_container.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:196:19: note: (24) following 'true' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:199:44: note: (26) dereference of NULL '*ptr.subitem_lens + i * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:201:15: warning: dereference of NULL '*<unknown> + j * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:298:46: note: (1) entry to 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:304:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:307:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:312:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:318:7: note: (6) calling 'make_basic_test_top_double_array_obj_container' from 'basic_test_top_double_array_obj_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:145:2: note: (7) entry to 'make_basic_test_top_double_array_obj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:150:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:152:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:154:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:156:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:157:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:159:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:160:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:162:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:164:8: note: (16) following 'false' branch... <--[gcc] cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:167:19: note: (18) following 'true' branch (when 'i < alen')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:169:55: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:171:25: note: (20) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:172:12: note: (21) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:172:12: note: (22) following 'true' branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:147:111: note: (24) inlined call to 'free_basic_test_top_double_array_obj_container_function' from 'make_basic_test_top_double_array_obj_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:143:71: note: (25) inlined call to 'free_basic_test_top_double_array_obj_container' from 'free_basic_test_top_double_array_obj_container_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_basic_test_top_double_array_obj_container', inlined from 'free_basic_test_top_double_array_obj_container_function' at src/ocispec/basic_test_top_double_array_obj.c:143:1, inlined from 'make_basic_test_top_double_array_obj_container' at src/ocispec/basic_test_top_double_array_obj.c:147:111: cc1: note: (26) calling 'free_basic_test_top_double_array_obj_container.part.0' from 'make_basic_test_top_double_array_obj_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c: In function 'free_basic_test_top_double_array_obj_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:189:6: note: (27) entry to 'free_basic_test_top_double_array_obj_container.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:196:19: note: (28) following 'true' branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:199:25: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:201:64: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:201:15: note: (32) dereference of NULL '*<unknown> + j * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:51:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:161:14: warning: Potential leak of memory pointed to by 'ptr' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_obj.c:244:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:31: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:35: error: memleak(CWE-401): Memory leak: ptr <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c: In function 'basic_test_top_double_array_string_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:20:15: warning: leak of 'basic_test_top_double_array_string_container_parse_data(fread_file(stream, & filesize), ctx, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:153:1: note: (1) entry to 'basic_test_top_double_array_string_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:158:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:161:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:163:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:168:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:168:7: note: (6) calling 'basic_test_top_double_array_string_container_parse_data' from 'basic_test_top_double_array_string_container_parse_file_stream' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:173:49: note: (7) entry to 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:179:8: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:182:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:187:8: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (12) calling 'make_basic_test_top_double_array_string_container' from 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:15:2: note: (13) entry to 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:20:9: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:22:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:24:8: note: (16) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:26:11: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:26:11: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:27:8: note: (19) assuming 'calloc(1, 24)' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:27:8: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:29:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:30:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:32:14: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:34:8: note: (24) following 'false' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:37:19: note: (26) following 'true' branch (when 'i < alen')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:39:55: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:41:12: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:44:19: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:45:23: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:47:32: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:48:16: note: (32) following 'false' branch (when 'val' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:55:30: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:45:23: note: (34) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:47:32: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:48:16: note: (36) following 'false' branch (when 'val' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:55:30: note: (37) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:45:23: note: (38) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:47:32: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:52:20: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:55:30: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:37:19: note: (42) following 'false' branch (when 'i >= alen')... <--[gcc] cc1: note: (43) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (44) returning to 'basic_test_top_double_array_string_container_parse_data' from 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:175:100: note: (45) inlined call to 'yajl_tree_free_function' from 'basic_test_top_double_array_string_container_parse_data' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:8: <--[gcc] In function 'yajl_tree_free_function', inlined from 'basic_test_top_double_array_string_container_parse_data' at src/ocispec/basic_test_top_double_array_string.c:175:100: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (46) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:171:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:171:36: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c: In function 'basic_test_top_double_array_string_container_parse_file_stream': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:168:7: note: (48) returning to 'basic_test_top_double_array_string_container_parse_file_stream' from 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:20:15: note: (49) 'basic_test_top_double_array_string_container_parse_data(fread_file(stream, & filesize), ctx, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c: In function 'free_basic_test_top_double_array_string_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:74:42: warning: dereference of NULL '*ptr.subitem_lens + i * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:173:49: note: (1) entry to 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:179:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:182:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:187:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (6) calling 'make_basic_test_top_double_array_string_container' from 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:27:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:29:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:30:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:32:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:33:25: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:34:8: note: (17) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:34:8: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:17:117: note: (20) inlined call to 'free_basic_test_top_double_array_string_container_function' from 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:13:74: note: (21) inlined call to 'free_basic_test_top_double_array_string_container' from 'free_basic_test_top_double_array_string_container_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_basic_test_top_double_array_string_container', inlined from 'free_basic_test_top_double_array_string_container_function' at src/ocispec/basic_test_top_double_array_string.c:13:1, inlined from 'make_basic_test_top_double_array_string_container' at src/ocispec/basic_test_top_double_array_string.c:17:117: cc1: note: (22) calling 'free_basic_test_top_double_array_string_container.part.0' from 'make_basic_test_top_double_array_string_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c: In function 'free_basic_test_top_double_array_string_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:64:6: note: (23) entry to 'free_basic_test_top_double_array_string_container.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:71:19: note: (24) following 'true' branch... <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:74:42: note: (26) dereference of NULL '*ptr.subitem_lens + i * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:76:13: warning: dereference of NULL '*<unknown> + j * 8' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:173:49: note: (1) entry to 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:179:8: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:182:10: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo src/ocispec/json_common.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/json_common.lo -MD -MP -MF $depbase.Tpo -c -o src/ocispec/json_common.lo src/ocispec/json_common.c &&\ mv -f $depbase.Tpo $depbase.Plo libtool: compile: gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/ocispec/json_common.lo -MD -MP -MF src/ocispec/.deps/json_common.Tpo -c src/ocispec/json_common.c -o src/ocispec/json_common.o make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-1.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-1.o -MD -MP -MF $depbase.Tpo -c -o tests/test-1.o tests/test-1.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-5.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-5.o -MD -MP -MF $depbase.Tpo -c -o tests/test-5.o tests/test-5.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-7.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-7.o -MD -MP -MF $depbase.Tpo -c -o tests/test-7.o tests/test-7.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-6.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-6.o -MD -MP -MF $depbase.Tpo -c -o tests/test-6.o tests/test-6.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-2.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-2.o -MD -MP -MF $depbase.Tpo -c -o tests/test-2.o tests/test-2.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-9.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-9.o -MD -MP -MF $depbase.Tpo -c -o tests/test-9.o tests/test-9.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-8.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-8.o -MD -MP -MF $depbase.Tpo -c -o tests/test-8.o tests/test-8.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-11.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-11.o -MD -MP -MF $depbase.Tpo -c -o tests/test-11.o tests/test-11.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o libocispec.la src/ocispec/image_spec_schema_config_schema.lo src/ocispec/image_spec_schema_content_descriptor.lo src/ocispec/image_spec_schema_defs.lo src/ocispec/image_spec_schema_defs_descriptor.lo src/ocispec/image_spec_schema_image_index_schema.lo src/ocispec/image_spec_schema_image_layout_schema.lo src/ocispec/image_spec_schema_image_manifest_schema.lo src/ocispec/runtime_spec_schema_config_linux.lo src/ocispec/runtime_spec_schema_config_zos.lo src/ocispec/runtime_spec_schema_config_schema.lo src/ocispec/runtime_spec_schema_config_solaris.lo src/ocispec/runtime_spec_schema_config_vm.lo src/ocispec/runtime_spec_schema_config_windows.lo src/ocispec/runtime_spec_schema_defs.lo src/ocispec/runtime_spec_schema_defs_linux.lo src/ocispec/runtime_spec_schema_defs_zos.lo src/ocispec/runtime_spec_schema_defs_vm.lo src/ocispec/runtime_spec_schema_defs_windows.lo src/ocispec/runtime_spec_schema_state_schema.lo src/ocispec/runtime_spec_schema_features_linux.lo src/ocispec/runtime_spec_schema_features_schema.lo src/ocispec/image_manifest_items_image_manifest_items_schema.lo src/ocispec/basic_test_double_array_item.lo src/ocispec/basic_test_double_array.lo src/ocispec/basic_test_top_array_int.lo src/ocispec/basic_test_top_array_string.lo src/ocispec/basic_test_top_double_array_int.lo src/ocispec/basic_test_top_double_array_obj.lo src/ocispec/basic_test_top_double_array_refobj.lo src/ocispec/basic_test_top_double_array_string.lo src/ocispec/read-file.lo src/ocispec/json_common.lo libtool: link: ar cr .libs/libocispec.a src/ocispec/image_spec_schema_config_schema.o src/ocispec/image_spec_schema_content_descriptor.o src/ocispec/image_spec_schema_defs.o src/ocispec/image_spec_schema_defs_descriptor.o src/ocispec/image_spec_schema_image_index_schema.o src/ocispec/image_spec_schema_image_layout_schema.o src/ocispec/image_spec_schema_image_manifest_schema.o src/ocispec/runtime_spec_schema_config_linux.o src/ocispec/runtime_spec_schema_config_zos.o src/ocispec/runtime_spec_schema_config_schema.o src/ocispec/runtime_spec_schema_config_solaris.o src/ocispec/runtime_spec_schema_config_vm.o src/ocispec/runtime_spec_schema_config_windows.o src/ocispec/runtime_spec_schema_defs.o src/ocispec/runtime_spec_schema_defs_linux.o src/ocispec/runtime_spec_schema_defs_zos.o src/ocispec/runtime_spec_schema_defs_vm.o src/ocispec/runtime_spec_schema_defs_windows.o src/ocispec/runtime_spec_schema_state_schema.o src/ocispec/runtime_spec_schema_features_linux.o src/ocispec/runtime_spec_schema_features_schema.o src/ocispec/image_manifest_items_image_manifest_items_schema.o src/ocispec/basic_test_double_array_item.o src/ocispec/basic_test_double_array.o src/ocispec/basic_test_top_array_int.o src/ocispec/basic_test_top_array_string.o src/ocispec/basic_test_top_double_array_int.o src/ocispec/basic_test_top_double_array_obj.o src/ocispec/basic_test_top_double_array_refobj.o src/ocispec/basic_test_top_double_array_string.o src/ocispec/read-file.o src/ocispec/json_common.o libtool: link: ranlib .libs/libocispec.a libtool: link: ( cd ".libs" && rm -f "libocispec.la" && ln -s "../libocispec.la" "libocispec.la" ) make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-5 tests/test-5.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-5 tests/test-5.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-6 tests/test-6.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-6 tests/test-6.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-10.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-10.o -MD -MP -MF $depbase.Tpo -c -o tests/test-10.o tests/test-10.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-8 tests/test-8.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-8 tests/test-8.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-9 tests/test-9.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-9 tests/test-9.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-7 tests/test-7.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-7 tests/test-7.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --mode=link libocispec.la -o libocispec.a libtool: link: ar cr libocispec.a libtool: link: ranlib libocispec.a make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-11 tests/test-11.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-11 tests/test-11.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-2 tests/test-2.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-2 tests/test-2.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-10 tests/test-10.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-10 tests/test-10.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o src/ocispec/validate src/ocispec/validate.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o src/ocispec/validate src/ocispec/validate.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-4.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-4.o -MD -MP -MF $depbase.Tpo -c -o tests/test-4.o tests/test-4.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' depbase=`echo tests/test-3.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/test-3.o -MD -MP -MF $depbase.Tpo -c -o tests/test-3.o tests/test-3.c &&\ mv -f $depbase.Tpo $depbase.Po make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-1 tests/test-1.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-1 tests/test-1.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-4 tests/test-4.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-4 tests/test-4.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /bin/sh ./libtool --tag=CC --mode=link gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-3 tests/test-3.o libocispec.la -lyajl libtool: link: gcc -I./src -I./src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/test-3 tests/test-3.o ./.libs/libocispec.a -lyajl make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' libocispec/src/ocispec/basic_test_top_double_array_string.c:187:8: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:193:7: note: (6) calling 'make_basic_test_top_double_array_string_container' from 'basic_test_top_double_array_string_container_parse_data' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:15:2: note: (7) entry to 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:20:9: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:22:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:24:8: note: (10) following 'false' branch (when 'alen != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:26:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:27:8: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:29:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:30:8: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:32:14: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:34:8: note: (16) following 'false' branch... <--[gcc] cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:37:19: note: (18) following 'true' branch (when 'i < alen')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:39:55: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:40:25: note: (20) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:41:12: note: (21) assuming '<unknown>' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:41:12: note: (22) following 'true' branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:17:117: note: (24) inlined call to 'free_basic_test_top_double_array_string_container_function' from 'make_basic_test_top_double_array_string_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:13:74: note: (25) inlined call to 'free_basic_test_top_double_array_string_container' from 'free_basic_test_top_double_array_string_container_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_basic_test_top_double_array_string_container', inlined from 'free_basic_test_top_double_array_string_container_function' at src/ocispec/basic_test_top_double_array_string.c:13:1, inlined from 'make_basic_test_top_double_array_string_container' at src/ocispec/basic_test_top_double_array_string.c:17:117: cc1: note: (26) calling 'free_basic_test_top_double_array_string_container.part.0' from 'make_basic_test_top_double_array_string_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c: In function 'free_basic_test_top_double_array_string_container.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:64:6: note: (27) entry to 'free_basic_test_top_double_array_string_container.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:71:19: note: (28) following 'true' branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:74:23: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:76:22: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:76:13: note: (32) dereference of NULL '*<unknown> + j * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:31:14: warning: Potential leak of memory pointed to by 'ptr' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/basic_test_top_double_array_string.c:119:13: warning: Value stored to 'stat' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:532: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:538: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:610: error: memleak(CWE-401): Memory leak: keys <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:711: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:716: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:780: error: memleak(CWE-401): Memory leak: keys <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:885: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:891: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1046: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1052: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1339: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1345: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1402: error: memleak(CWE-401): Memory leak: keys <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1408: error: memleak(CWE-401): Memory leak: keys <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1408: error: memleak(CWE-401): Memory leak: vals <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1514: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1521: error: memleak(CWE-401): Memory leak: ret <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c: In function 'free_json_map_string_string.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1480:16: warning: use of uninitialized value '*map.values' [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1488:29: note: (1) entry to 'make_json_map_string_string' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1496:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1499:7: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1501:9: note: (4) region created on heap here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1502:6: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1508:12: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1511:6: note: (7) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1513:16: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1491:72: note: (9) inlined call to 'free_json_map_string_string_function' from 'make_json_map_string_string' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:6: <--[gcc] In function 'free_json_map_string_string_function', inlined from 'make_json_map_string_string' at src/ocispec/json_common.c:1491:72: /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:41:8: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1486:1: note: in expansion of macro 'define_cleaner_function' <--[gcc] In function 'free_json_map_string_string.part.0': cc1: note: (11) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1491:72: note: (12) inlined call to 'free_json_map_string_string_function' from 'make_json_map_string_string' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1486:52: note: (13) inlined call to 'free_json_map_string_string' from 'free_json_map_string_string_function' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:42:7: note: in definition of macro 'define_cleaner_function' <--[gcc] In function 'free_json_map_string_string', inlined from 'free_json_map_string_string_function' at src/ocispec/json_common.c:1486:1, inlined from 'make_json_map_string_string' at src/ocispec/json_common.c:1491:72: cc1: note: (14) calling 'free_json_map_string_string.part.0' from 'make_json_map_string_string' /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c: In function 'free_json_map_string_string.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1466:1: note: (15) entry to 'free_json_map_string_string.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1471:21: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1478:16: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1480:16: note: (18) use of uninitialized value '*map.values' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:532:14: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:610:15: warning: Potential leak of memory pointed to by 'keys' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:711:14: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:780:15: warning: Potential leak of memory pointed to by 'keys' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:885:14: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1045:16: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1210:24: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1339:14: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1402:15: warning: Potential leak of memory pointed to by 'keys' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1408:15: warning: Potential leak of memory pointed to by 'vals' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1513:16: warning: Potential leak of memory pointed to by 'ret' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1595:13: warning: Potential leak of memory pointed to by 'new_key' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.c:1600:13: warning: Potential leak of memory pointed to by 'new_value' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-1.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-7.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-6.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-9.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-8.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-11.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-4.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/tests/test-3.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c: In function ‘libcrun_precreate_cgroup_cgroupfs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: warning: leak of file descriptor ‘open(cgroup_path, 720896)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:68:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:71:9: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:72:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:78:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:79:6: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (8) ‘open(cgroup_path, 720896)’ leaks here; was opened at (7) <--[gcc] make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup-cgroupfs.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup-cgroupfs.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup-cgroupfs.o `test -f 'src/libcrun/cgroup-cgroupfs.c' || echo './'`src/libcrun/cgroup-cgroupfs.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup-cgroupfs.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup-cgroupfs.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup-setup.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup-setup.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup-setup.o `test -f 'src/libcrun/cgroup-setup.c' || echo './'`src/libcrun/cgroup-setup.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup-setup.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup-setup.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_testing_a-blake3_portable.o -MD -MP -MF src/libcrun/blake3/.deps/libcrun_testing_a-blake3_portable.Tpo -c -o src/libcrun/blake3/libcrun_testing_a-blake3_portable.o `test -f 'src/libcrun/blake3/blake3_portable.c' || echo './'`src/libcrun/blake3/blake3_portable.c mv -f src/libcrun/blake3/.deps/libcrun_testing_a-blake3_portable.Tpo src/libcrun/blake3/.deps/libcrun_testing_a-blake3_portable.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_testing_a-blake3.o -MD -MP -MF src/libcrun/blake3/.deps/libcrun_testing_a-blake3.Tpo -c -o src/libcrun/blake3/libcrun_testing_a-blake3.o `test -f 'src/libcrun/blake3/blake3.c' || echo './'`src/libcrun/blake3/blake3.c mv -f src/libcrun/blake3/.deps/libcrun_testing_a-blake3.Tpo src/libcrun/blake3/.deps/libcrun_testing_a-blake3.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘read_unified_cgroup_pid’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(from)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following ‘true’ branch (when ‘cgroup_mode == 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (4) calling ‘enter_cgroup_v2’ from ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:397:1: note: (5) entry to ‘enter_cgroup_v2’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:408:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:411:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:419:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:422:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:423:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:426:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:439:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:442:3: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:454:10: note: (14) following ‘true’ branch (when ‘init_pid > 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (16) calling ‘read_unified_cgroup_pid’ from ‘enter_cgroup_v2’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:294:1: note: (17) entry to ‘read_unified_cgroup_pid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:304:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (20) when ‘strstr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:308:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:311:8: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:313:8: note: (23) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:314:6: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:316:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:318:11: note: (26) calling ‘xstrdup’ from ‘read_unified_cgroup_pid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (27) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (28) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (31) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:318:11: note: (34) returning to ‘read_unified_cgroup_pid’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (35) ‘xstrdup(from)’ leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function ‘initialize_cpuset_subsystem_rec’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: warning: leak of file descriptor ‘open(path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following ‘false’ branch (when ‘cgroup_mode != 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (4) calling ‘enter_cgroup_v1’ from ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:323:1: note: (5) entry to ‘enter_cgroup_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:338:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:341:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:342:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:352:19: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:353:8: note: (10) following ‘true’ branch (when ‘has_data != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:359:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:371:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (16) calling ‘enter_cgroup_subsystem’ from ‘enter_cgroup_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:197:1: note: (17) entry to ‘enter_cgroup_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:204:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (20) following ‘true’ branch (when ‘create_if_missing != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:209:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:210:10: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:10: note: (24) following ‘true’ branch (when the strings are equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (26) calling ‘initialize_cpuset_subsystem’ from ‘enter_cgroup_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:148:1: note: (27) entry to ‘initialize_cpuset_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (28) calling ‘xstrdup’ from ‘initialize_cpuset_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (29) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (30) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (34) returning to ‘initialize_cpuset_subsystem’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: note: (35) calling ‘initialize_cpuset_subsystem_rec’ from ‘initialize_cpuset_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:43:1: note: (36) entry to ‘initialize_cpuset_subsystem_rec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: note: (37) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: note: (38) ‘open(path, 589824)’ leaks here; was opened at (37) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function ‘initialize_cpuset_subsystem’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following ‘false’ branch (when ‘cgroup_mode != 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (4) calling ‘enter_cgroup_v1’ from ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:323:1: note: (5) entry to ‘enter_cgroup_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:325:22: note: (6) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:338:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:341:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:342:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:352:19: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:353:8: note: (11) following ‘true’ branch (when ‘has_data != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:359:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:371:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (17) calling ‘enter_cgroup_subsystem’ from ‘enter_cgroup_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:197:1: note: (18) entry to ‘enter_cgroup_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:200:22: note: (19) ‘cgroup_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:204:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (22) following ‘true’ branch (when ‘create_if_missing != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:209:13: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:210:10: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:11: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:10: note: (26) following ‘true’ branch (when the strings are equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (28) calling ‘initialize_cpuset_subsystem’ from ‘enter_cgroup_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:148:1: note: (29) entry to ‘initialize_cpuset_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (30) calling ‘xstrdup’ from ‘initialize_cpuset_subsystem’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following ‘true’ branch (when ‘str’ is NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (34) returning to ‘initialize_cpuset_subsystem’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: note: (35) argument 1 (‘xstrdup(path)’) NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function ‘enter_cgroup_v2’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: warning: use of NULL ‘cgroup_crun_exec_path’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following ‘true’ branch (when ‘cgroup_mode == 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (4) calling ‘enter_cgroup_v2’ from ‘enter_cgroup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:397:1: note: (5) entry to ‘enter_cgroup_v2’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:399:22: note: (6) ‘cgroup_path_procs’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:400:22: note: (7) ‘cgroup_path_procs’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:408:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:411:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:419:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:422:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:423:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:426:17: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:439:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:442:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:450:26: note: (16) ‘cgroup_crun_exec_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:451:26: note: (17) ‘cgroup_crun_exec_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:454:10: note: (18) following ‘true’ branch (when ‘init_pid > 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (20) calling ‘read_unified_cgroup_pid’ from ‘enter_cgroup_v2’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:294:1: note: (21) entry to ‘read_unified_cgroup_pid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:299:22: note: (22) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (23) when ‘strstr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:308:6: note: (24) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:84:25: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:309:12: note: in expansion of macro ‘crun_make_error’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (26) returning to ‘enter_cgroup_v2’ from ‘read_unified_cgroup_pid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:457:14: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (29) ‘cgroup_crun_exec_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (30) ‘cgroup_crun_exec_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (31) argument 2 (‘cgroup_crun_exec_path’) NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:23: <--[gcc] /usr/include/string.h:159:12: note: argument 2 of ‘strncmp’ must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:123:16: warning: Although the value stored to 'allocated_cpus' is used in the enclosing expression, the value is never actually read from 'allocated_cpus' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:125:16: warning: Although the value stored to 'allocated_mems' is used in the enclosing expression, the value is never actually read from 'allocated_mems' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In function ‘compress_chunks_parallel’, /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:186: warning: uninitvar(CWE-457): Uninitialized variable: chunks_array <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:229: warning: uninitvar(CWE-457): Uninitialized variable: parents_array <--[cppcheck] inlined from ‘blake3_compress_subtree_wide’ at src/libcrun/blake3/blake3.c:274:12: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:186:3: warning: ‘chunks_array’ may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 186 | blake3_hash_many(chunks_array, chunks_array_len, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 187 | BLAKE3_CHUNK_LEN / BLAKE3_BLOCK_LEN, key, chunk_counter, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 188 | true, flags, CHUNK_START, CHUNK_END, out); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:6: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3_impl.h: In function ‘blake3_compress_subtree_wide’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3_impl.h:17:35: note: by argument 1 of type ‘const uint8_t * const *’ to ‘blake3_hash_many’ declared here <--[gcc] 17 | #define blake3_hash_many_portable blake3_hash_many | ^~~~~~~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:177:18: note: ‘chunks_array’ declared here <--[gcc] 177 | const uint8_t *chunks_array[MAX_SIMD_DEGREE]; | ^~~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:138:3: warning: Value stored to 'input' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:139:3: warning: Value stored to 'input_len' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_cgroup_enter’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(24)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:284:1: note: (1) entry to ‘libcrun_cgroup_enter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (2) calling ‘xmalloc0’ from ‘libcrun_cgroup_enter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (8) returning to ‘libcrun_cgroup_enter’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) ‘xmalloc0(24)’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function ‘libcrun_cgroup_destroy’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: warning: dereference of NULL ‘cgroup_manager’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:195:1: note: (1) entry to ‘libcrun_cgroup_destroy’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:197:34: note: (2) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:200:9: note: (3) calling ‘get_cgroup_manager’ from ‘libcrun_cgroup_destroy’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (4) entry to ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (5) following ‘default:’ branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:200:9: note: (7) returning to ‘libcrun_cgroup_destroy’ from ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:201:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (10) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (11) dereference of NULL ‘cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function ‘libcrun_update_cgroup_resources’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: warning: dereference of NULL ‘cgroup_manager’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:208:1: note: (1) entry to ‘libcrun_update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:212:34: note: (2) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:215:9: note: (3) calling ‘get_cgroup_manager’ from ‘libcrun_update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (4) entry to ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (5) following ‘default:’ branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:215:9: note: (7) returning to ‘libcrun_update_cgroup_resources’ from ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:216:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (10) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (11) dereference of NULL ‘cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function ‘libcrun_cgroup_preenter’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: warning: dereference of NULL ‘cgroup_manager’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:258:1: note: (1) entry to ‘libcrun_cgroup_preenter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:267:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:270:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:270:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (6) calling ‘get_cgroup_manager’ from ‘libcrun_cgroup_preenter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (7) entry to ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (8) following ‘default:’ branch... <--[gcc] cc1: note: (9) ...to here cc1: note: (10) calling ‘get_cgroup_manager.part.0’ from ‘get_cgroup_manager’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (11) entry to ‘get_cgroup_manager.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (12) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (13) ‘cgroup_manager’ is NULL <--[gcc] cc1: note: (14) returning to ‘get_cgroup_manager’ from ‘get_cgroup_manager.part.0’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (15) returning to ‘libcrun_cgroup_preenter’ from ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:274:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (18) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (19) dereference of NULL ‘cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function ‘libcrun_cgroup_enter’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: warning: dereference of NULL ‘cgroup_manager’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:284:1: note: (1) entry to ‘libcrun_cgroup_enter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (2) calling ‘xmalloc0’ from ‘libcrun_cgroup_enter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (6) returning to ‘libcrun_cgroup_enter’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:296:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:304:7: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:328:9: note: (9) calling ‘get_cgroup_manager’ from ‘libcrun_cgroup_enter’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (10) entry to ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (11) following ‘default:’ branch... <--[gcc] cc1: note: (12) ...to here cc1: note: (13) calling ‘get_cgroup_manager.part.0’ from ‘get_cgroup_manager’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (14) entry to ‘get_cgroup_manager.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (15) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (16) ‘cgroup_manager’ is NULL <--[gcc] cc1: note: (17) returning to ‘get_cgroup_manager’ from ‘get_cgroup_manager.part.0’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:328:9: note: (18) returning to ‘libcrun_cgroup_enter’ from ‘get_cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:329:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:332:25: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: note: (21) ‘cgroup_manager’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: note: (22) dereference of NULL ‘cgroup_manager’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:10: warning: Access to field 'destroy_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:7: warning: Access to field 'update_resources' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:7: warning: Access to field 'precreate_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:297:12: warning: Potential leak of memory pointed to by 'status' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:9: warning: Access to field 'create_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup.o `test -f 'src/libcrun/cgroup.c' || echo './'`src/libcrun/cgroup.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cloned_binary.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cloned_binary.Tpo -c -o src/libcrun/libcrun_testing_a-cloned_binary.o `test -f 'src/libcrun/cloned_binary.c' || echo './'`src/libcrun/cloned_binary.c mv -f src/libcrun/.deps/libcrun_testing_a-cloned_binary.Tpo src/libcrun/.deps/libcrun_testing_a-cloned_binary.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-chroot_realpath.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-chroot_realpath.Tpo -c -o src/libcrun/libcrun_testing_a-chroot_realpath.o `test -f 'src/libcrun/chroot_realpath.c' || echo './'`src/libcrun/chroot_realpath.c mv -f src/libcrun/.deps/libcrun_testing_a-chroot_realpath.Tpo src/libcrun/.deps/libcrun_testing_a-chroot_realpath.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:43: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:17: warning: Array access results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function ‘fetchve’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: warning: leak of ‘read_file("/proc/self/cmdline", &cmdline_size)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) calling ‘fetchve’ from ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (5) entry to ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (6) calling ‘read_file’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (7) entry to ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (8) following ‘false’ branch (when ‘length’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (16) calling ‘xrealloc’ from ‘read_file’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:61: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (17) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to ‘read_file’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to ‘fetchve’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling ‘parse_xargs’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following ‘false’ branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (34) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (36) calling ‘xrealloc’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (37) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (38) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (41) returning to ‘parse_xargs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (42) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (44) calling ‘xrealloc’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (45) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (46) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (47) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (49) returning to ‘parse_xargs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (50) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (52) returning to ‘fetchve’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (53) ‘read_file("/proc/self/cmdline", &cmdline_size)’ leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function ‘parse_xargs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:523:16: note: (2) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (5) calling ‘fetchve’ from ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (6) entry to ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (7) calling ‘read_file’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (8) entry to ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (9) following ‘false’ branch (when ‘length’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (17) calling ‘xrealloc’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (18) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to ‘read_file’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to ‘fetchve’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling ‘parse_xargs’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (34) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:19: note: (35) following ‘false’ branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (39) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:18: note: (40) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: note: (41) dereference of NULL ‘*output + (long unsigned int)num * 8’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:535:11: warning: Potential leak of memory pointed to by 'argv' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/chroot_realpath.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/chroot_realpath.c:55:8: warning: Value stored to 'got_path_root' during its initialization is never read [deadcode.DeadStores] <--[clang] make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup-utils.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup-utils.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup-utils.o `test -f 'src/libcrun/cgroup-utils.c' || echo './'`src/libcrun/cgroup-utils.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup-utils.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup-utils.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-custom-handler.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-custom-handler.Tpo -c -o src/libcrun/libcrun_testing_a-custom-handler.o `test -f 'src/libcrun/custom-handler.c' || echo './'`src/libcrun/custom-handler.c mv -f src/libcrun/.deps/libcrun_testing_a-custom-handler.Tpo src/libcrun/.deps/libcrun_testing_a-custom-handler.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup-systemd.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup-systemd.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup-systemd.o `test -f 'src/libcrun/cgroup-systemd.c' || echo './'`src/libcrun/cgroup-systemd.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup-systemd.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup-systemd.Po /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘write_controller_file’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(controllers_len + 1)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:754:1: note: (1) entry to ‘write_controller_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:768:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:770:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:771:6: note: (4) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (6) calling ‘xmalloc’ from ‘write_controller_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (9) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (12) returning to ‘write_controller_file’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (13) ‘xmalloc(controllers_len + 1)’ leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘maybe_make_cgroup_threaded’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(t)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:754:1: note: (1) entry to ‘write_controller_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:768:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:770:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:771:6: note: (4) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (6) calling ‘xmalloc’ from ‘write_controller_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (10) returning to ‘write_controller_file’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:802:10: note: (11) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:804:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:804:17: note: (13) calling ‘maybe_make_cgroup_threaded’ from ‘write_controller_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:75:1: note: (14) entry to ‘maybe_make_cgroup_threaded’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:88:20: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:91:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:92:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:95:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:96:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:99:12: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:106:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (23) calling ‘xstrdup’ from ‘maybe_make_cgroup_threaded’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (31) returning to ‘maybe_make_cgroup_threaded’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) ‘xstrdup(t)’ leaks here; was allocated at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c: In function ‘libcrun_get_cgroup_dirfd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: warning: leak of file descriptor ‘open(path_to_cgroup, 720896)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:939:1: note: (1) entry to ‘libcrun_get_cgroup_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:947:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:950:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:950:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:953:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:953:6: note: (6) following ‘false’ branch (when ‘status’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:956:30: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:956:7: note: (8) inlined call to ‘is_empty_string’ from ‘libcrun_get_cgroup_dirfd’ <--[gcc] In function ‘is_empty_string’, inlined from ‘libcrun_get_cgroup_dirfd’ at src/libcrun/cgroup-utils.c:956:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c: In function ‘libcrun_get_cgroup_dirfd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:959:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:960:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (13) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (14) ‘open(path_to_cgroup, 720896)’ leaks here; was opened at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:371:11: warning: Value stored to 'child_dfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:624:15: warning: Value stored to 'state' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:781:16: warning: Potential leak of memory pointed to by 'controllers_copy' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:93:28: warning: Array access (from variable 'mask') results in a null pointer dereference [core.NullDereference] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:108:10: warning: Potential leak of memory pointed to by 'mask' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:330:16: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:605:14: warning: Potential leak of memory pointed to by 'name' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:12: warning: Although the value stored to 'v_start' is used in the enclosing expression, the value is never actually read from 'v_start' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:616:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:14: warning: Although the value stored to 'v_start' is used in the enclosing expression, the value is never actually read from 'v_start' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:640:20: warning: Potential leak of memory pointed to by 'parts' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:655:16: warning: Potential leak of memory pointed to by 'part' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:891:11: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:895:11: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1108:3: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:7: warning: Potential leak of memory pointed to by 'slice' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1351:3: warning: Potential leak of memory pointed to by 'path_to_scope' [unix.Malloc] <--[clang] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘append_systemd_annotation’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(name_len + 2)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling ‘enter_systemd_cgroup_scope’ from ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling ‘open_sd_bus_connection’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to ‘enter_systemd_cgroup_scope’ from ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following ‘false’ branch (when ‘slice’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following ‘true’ branch (when ‘annotations’ is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following ‘false’ branch (when ‘len > 23’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling ‘append_systemd_annotation’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:585:6: note: (33) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:586:14: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:586:7: note: (35) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (37) calling ‘xmalloc’ from ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (38) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (39) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (40) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (43) returning to ‘append_systemd_annotation’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (44) ‘xmalloc(name_len + 2)’ leaks here; was allocated at (39) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(256)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling ‘enter_systemd_cgroup_scope’ from ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling ‘open_sd_bus_connection’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to ‘enter_systemd_cgroup_scope’ from ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following ‘false’ branch (when ‘slice’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following ‘true’ branch (when ‘annotations’ is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following ‘false’ branch (when ‘len > 23’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling ‘append_systemd_annotation’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (37) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (39) calling ‘xmalloc’ from ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (42) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (45) returning to ‘append_systemd_annotation’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (46) ‘xmalloc(256)’ leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd_cpuset’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1355:1: note: (1) entry to ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1368:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1371:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1372:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1375:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1376:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1379:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1383:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1389:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1390:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1396:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1397:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1403:9: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1404:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1407:12: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1408:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1414:12: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1415:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (20) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:55: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (22) calling ‘setup_rt_runtime’ from ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:143:1: note: (23) entry to ‘setup_rt_runtime’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:147:21: note: (24) inlined call to ‘cleanup_closep’ from ‘setup_rt_runtime’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘setup_rt_runtime’ at src/libcrun/cgroup-systemd.c:147:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:146:22: note: (26) inlined call to ‘cleanup_freep’ from ‘setup_rt_runtime’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘setup_rt_runtime’ at src/libcrun/cgroup-systemd.c:146:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (28) returning to ‘libcrun_update_resources_systemd’ from ‘setup_rt_runtime’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1424:10: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:66: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:13: note: (31) calling ‘setup_cpuset_for_systemd_v1’ from ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:242:1: note: (32) entry to ‘setup_cpuset_for_systemd_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:249:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:252:9: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:253:6: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:256:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:257:6: note: (37) following ‘false’ branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:260:27: note: (39) following ‘true’ branch (when ‘parent != 2’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:265:13: note: (41) following ‘false’ branch (when ‘parent == 0’)... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:266:10: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (45) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:270:10: note: (46) assuming ‘dirfd_cpuset’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:270:10: note: (47) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:273:13: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:274:10: note: (49) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:263:26: note: (50) inlined call to ‘cleanup_freep’ from ‘setup_cpuset_for_systemd_v1’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘setup_cpuset_for_systemd_v1’ at src/libcrun/cgroup-systemd.c:263:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (52) inlined call to ‘cleanup_closep’ from ‘setup_cpuset_for_systemd_v1’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘setup_cpuset_for_systemd_v1’ at src/libcrun/cgroup-systemd.c:262:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (53) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (54) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (55) inlined call to ‘cleanup_closep’ from ‘setup_cpuset_for_systemd_v1’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘setup_cpuset_for_systemd_v1’ at src/libcrun/cgroup-systemd.c:262:25: cc1: note: (56) calling ‘cleanup_closep.part.0’ from ‘setup_cpuset_for_systemd_v1’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (57) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (58) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (59) following ‘true’ branch... <--[gcc] cc1: note: (60) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (61) second ‘close’ here; first ‘close’ was at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘append_systemd_annotation’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(value)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling ‘enter_systemd_cgroup_scope’ from ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling ‘open_sd_bus_connection’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to ‘enter_systemd_cgroup_scope’ from ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following ‘false’ branch (when ‘slice’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following ‘true’ branch (when ‘annotations’ is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following ‘false’ branch (when ‘len > 23’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling ‘append_systemd_annotation’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (37) calling ‘xstrdup’ from ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (38) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (39) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (42) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (43) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (44) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (45) returning to ‘append_systemd_annotation’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (46) ‘xstrdup(value)’ leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(value + 1)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling ‘enter_systemd_cgroup_scope’ from ‘libcrun_cgroup_enter_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling ‘open_sd_bus_connection’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to ‘enter_systemd_cgroup_scope’ from ‘open_sd_bus_connection’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following ‘false’ branch (when ‘slice’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following ‘true’ branch (when ‘annotations’ is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following ‘false’ branch (when ‘len > 23’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling ‘append_systemd_annotation’ from ‘enter_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (37) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (39) calling ‘xmalloc’ from ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (43) returning to ‘append_systemd_annotation’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:24: note: (44) calling ‘xstrdup’ from ‘append_systemd_annotation’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (48) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (49) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (50) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (51) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:24: note: (52) returning to ‘append_systemd_annotation’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (53) ‘xstrdup(value + 1)’ leaks here; was allocated at (48) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘setup_cpuset_for_systemd_v1’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: warning: leak of file descriptor ‘open(path_to_cpuset, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1355:1: note: (1) entry to ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1368:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1371:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1372:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1375:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1376:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1379:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1383:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1389:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1390:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1396:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1397:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1403:9: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1404:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1407:12: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1408:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1414:12: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1415:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (20) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:55: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (22) calling ‘setup_rt_runtime’ from ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:143:1: note: (23) entry to ‘setup_rt_runtime’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:147:21: note: (24) inlined call to ‘cleanup_closep’ from ‘setup_rt_runtime’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘setup_rt_runtime’ at src/libcrun/cgroup-systemd.c:147:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘setup_cpuset_for_systemd_v1’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:146:22: note: (26) inlined call to ‘cleanup_freep’ from ‘setup_rt_runtime’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘setup_rt_runtime’ at src/libcrun/cgroup-systemd.c:146:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘setup_cpuset_for_systemd_v1’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (28) returning to ‘libcrun_update_resources_systemd’ from ‘setup_rt_runtime’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1424:10: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:66: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:13: note: (31) calling ‘setup_cpuset_for_systemd_v1’ from ‘libcrun_update_resources_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:242:1: note: (32) entry to ‘setup_cpuset_for_systemd_v1’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:249:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:252:9: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:253:6: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:256:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:257:6: note: (37) following ‘false’ branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:260:27: note: (39) following ‘true’ branch (when ‘parent != 2’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:265:13: note: (41) following ‘false’ branch (when ‘parent == 0’)... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:266:10: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (45) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (46) ‘open(path_to_cpuset, 589824)’ leaks here; was opened at (45) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘get_cgroup_scope_path’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (1) entry to ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (2) calling ‘xstrdup’ from ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (3) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (4) following ‘true’ branch (when ‘str’ is NULL)... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (6) returning to ‘get_cgroup_scope_path’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (7) argument 1 (‘xstrdup(cgroup_path)’) NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of ‘__builtin_strchr’ must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function ‘libcrun_destroy_cgroup_systemd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: warning: leak of ‘get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1330:1: note: (1) entry to ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1338:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1341:43: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (4) calling ‘libcrun_destroy_systemd_cgroup_scope’ from ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1180:1: note: (5) entry to ‘libcrun_destroy_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1235:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:7: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:7: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1241:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (12) returning to ‘libcrun_destroy_cgroup_systemd’ from ‘libcrun_destroy_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (13) calling ‘get_cgroup_scope_path’ from ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (14) entry to ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (15) calling ‘xstrdup’ from ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (23) returning to ‘get_cgroup_scope_path’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (24) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (25) following ‘false’ branch (when ‘cur’ is NULL)... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (27) returning to ‘libcrun_destroy_cgroup_systemd’ from ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (28) ‘get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)’ leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: warning: leak of ‘get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1330:1: note: (1) entry to ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1338:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1341:43: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (4) calling ‘libcrun_destroy_systemd_cgroup_scope’ from ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crunmake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-error.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-error.Tpo -c -o src/libcrun/libcrun_testing_a-error.o `test -f 'src/libcrun/error.c' || echo './'`src/libcrun/error.c mv -f src/libcrun/.deps/libcrun_testing_a-error.Tpo src/libcrun/.deps/libcrun_testing_a-error.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-handler-utils.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-handler-utils.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-handler-utils.o `test -f 'src/libcrun/handlers/handler-utils.c' || echo './'`src/libcrun/handlers/handler-utils.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-handler-utils.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-handler-utils.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-cgroup-resources.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-cgroup-resources.Tpo -c -o src/libcrun/libcrun_testing_a-cgroup-resources.o `test -f 'src/libcrun/cgroup-resources.c' || echo './'`src/libcrun/cgroup-resources.c mv -f src/libcrun/.deps/libcrun_testing_a-cgroup-resources.Tpo src/libcrun/.deps/libcrun_testing_a-cgroup-resources.Po -1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1180:1: note: (5) entry to ‘libcrun_destroy_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1235:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:7: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:7: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1241:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (12) returning to ‘libcrun_destroy_cgroup_systemd’ from ‘libcrun_destroy_systemd_cgroup_scope’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (13) calling ‘get_cgroup_scope_path’ from ‘libcrun_destroy_cgroup_systemd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (14) entry to ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (15) calling ‘xstrdup’ from ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (23) returning to ‘get_cgroup_scope_path’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (24) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (25) following ‘true’ branch (when ‘cur’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:20: note: (27) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1313:10: note: (28) following ‘false’ branch (when ‘next’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1316:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1317:10: note: (30) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1319:13: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1322:19: note: (32) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1323:12: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (34) following ‘true’ branch (when ‘cur’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:20: note: (36) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1313:10: note: (37) following ‘false’ branch (when ‘next’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1316:13: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (39) returning to ‘libcrun_destroy_cgroup_systemd’ from ‘get_cgroup_scope_path’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (40) ‘get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)’ leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/handler-utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:134:11: warning: Potential leak of memory pointed to by 'key' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:984:20: warning: Potential leak of memory pointed to by 'period_str' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘cgroup_dirfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (15) assuming ‘cgroup_dirfd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1253:21: note: (18) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v2_resources’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:23: <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v2_resources’ at src/libcrun/cgroup-resources.c:1253:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (19) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (20) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1253:21: note: (21) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v2_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v2_resources’ at src/libcrun/cgroup-resources.c:1253:21: cc1: note: (22) calling ‘cleanup_closep.part.0’ from ‘update_cgroup_v2_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (23) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (24) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (25) following ‘true’ branch... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (27) second ‘close’ here; first ‘close’ was at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (20) calling ‘write_network_resources’ from ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:409:1: note: (21) entry to ‘write_network_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:415:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:10: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:6: note: (24) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:427:10: note: (26) following ‘false’ branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (28) inlined call to ‘cleanup_closep’ from ‘write_network_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_network_resources’ at src/libcrun/cgroup-resources.c:425:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (29) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (31) inlined call to ‘cleanup_closep’ from ‘write_network_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_network_resources’ at src/libcrun/cgroup-resources.c:425:25: cc1: note: (32) calling ‘cleanup_closep.part.0’ from ‘write_network_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (33) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (34) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (35) following ‘true’ branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (37) second ‘close’ here; first ‘close’ was at (34) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd_netprio’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (19) assuming ‘dirfd_netprio’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (22) calling ‘write_network_resources’ from ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:409:1: note: (23) entry to ‘write_network_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:415:6: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (26) returning to ‘update_cgroup_v1_resources’ from ‘write_network_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1110:10: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (28) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1090:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (30) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (32) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1090:25: cc1: note: (33) calling ‘cleanup_closep.part.0’ from ‘update_cgroup_v1_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (34) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (35) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (36) following ‘true’ branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (38) second ‘close’ here; first ‘close’ was at (35) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘wfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling ‘write_blkio_resources’ from ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to ‘write_blkio_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:242:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:6: note: (24) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:286:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:286:10: note: (26) following ‘true’ branch (when ‘cgroup2 != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:292:14: note: (28) following ‘false’ branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (30) inlined call to ‘cleanup_closep’ from ‘write_blkio_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_blkio_resources’ at src/libcrun/cgroup-resources.c:288:29: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (31) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (32) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (33) inlined call to ‘cleanup_closep’ from ‘write_blkio_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_blkio_resources’ at src/libcrun/cgroup-resources.c:288:29: cc1: note: (34) calling ‘cleanup_closep.part.0’ from ‘write_blkio_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (35) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (36) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (37) following ‘true’ branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (39) second ‘close’ here; first ‘close’ was at (36) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd_netclass’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (17) assuming ‘dirfd_netclass’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1110:10: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (23) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1090:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1088:25: note: (27) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (28) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1088:25: note: (30) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1088:25: cc1: note: (31) calling ‘cleanup_closep.part.0’ from ‘update_cgroup_v1_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (32) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (33) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (34) following ‘true’ branch... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (36) second ‘close’ here; first ‘close’ was at (33) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd_htlb’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1114:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1116:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1120:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1123:10: note: (15) assuming ‘dirfd_htlb’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1123:10: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (18) calling ‘write_hugetlb_resources’ from ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:443:1: note: (19) entry to ‘write_hugetlb_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:449:17: note: (20) following ‘false’ branch (when ‘i >= htlb_len’)... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (22) returning to ‘update_cgroup_v1_resources’ from ‘write_hugetlb_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1128:10: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1117:25: note: (24) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1117:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (26) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1117:25: note: (28) inlined call to ‘cleanup_closep’ from ‘update_cgroup_v1_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘update_cgroup_v1_resources’ at src/libcrun/cgroup-resources.c:1117:25: cc1: note: (29) calling ‘cleanup_closep.part.0’ from ‘update_cgroup_v1_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (30) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (31) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (32) following ‘true’ branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (34) second ‘close’ here; first ‘close’ was at (31) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘wfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling ‘write_blkio_resources’ from ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to ‘write_blkio_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:347:6: note: (22) following ‘true’ branch (when ‘cgroup2 != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:353:10: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:359:13: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:361:10: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:364:13: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:366:10: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:369:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:371:10: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:374:13: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:376:10: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (33) inlined call to ‘cleanup_closep’ from ‘write_blkio_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_blkio_resources’ at src/libcrun/cgroup-resources.c:349:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (35) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (37) inlined call to ‘cleanup_closep’ from ‘write_blkio_resources’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘write_blkio_resources’ at src/libcrun/cgroup-resources.c:349:25: cc1: note: (38) calling ‘cleanup_closep.part.0’ from ‘write_blkio_resources’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (39) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (40) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (41) following ‘true’ branch... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (43) second ‘close’ here; first ‘close’ was at (40) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘check_cgroup_v2_controller_available_wrapper’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(name)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling ‘write_blkio_resources’ from ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to ‘write_blkio_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:347:6: note: (22) following ‘true’ branch (when ‘cgroup2 != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:353:10: note: (24) following ‘true’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:355:39: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:356:18: note: (26) calling ‘check_cgroup_v2_controller_available_wrapper’ from ‘write_blkio_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:110:1: note: (27) entry to ‘check_cgroup_v2_controller_available_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:112:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:115:3: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:118:6: note: (30) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:120:26: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:129:13: note: (32) calling ‘xstrdup’ from ‘check_cgroup_v2_controller_available_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (33) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (34) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (36) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (37) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (38) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:129:13: note: (40) returning to ‘check_cgroup_v2_controller_available_wrapper’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (41) ‘xstrdup(name)’ leaks here; was allocated at (36) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:131:12: warning: use of NULL ‘controllers’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1252:22: note: (10) ‘cgroup_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1303:6: note: (17) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1305:13: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1305:13: note: (19) calling ‘write_hugetlb_resources’ from ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:443:1: note: (20) entry to ‘write_hugetlb_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:449:17: note: (21) following ‘true’ branch (when ‘i < htlb_len’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:451:26: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:451:26: note: (23) ‘filename’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:456:32: note: (24) following ‘true’ branch (when ‘cgroup2 != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:458:50: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:461:13: note: (26) calling ‘write_file_and_check_controllers_at’ from ‘write_hugetlb_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:167:1: note: (27) entry to ‘write_file_and_check_controllers_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:172:9: note: (28) calling ‘write_cgroup_file_or_alias’ from ‘write_file_and_check_controllers_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:48:1: note: (29) entry to ‘write_cgroup_file_or_alias’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:53:6: note: (30) following ‘false’ branch... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:172:9: note: (32) returning to ‘write_file_and_check_controllers_at’ from ‘write_cgroup_file_or_alias’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:173:6: note: (33) following ‘true’ branch (when ‘cgroup2 != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:174:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:174:12: note: (35) calling ‘check_cgroup_v2_controller_available_wrapper’ from ‘write_file_and_check_controllers_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:110:1: note: (36) entry to ‘check_cgroup_v2_controller_available_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:120:26: note: (37) ‘controllers’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:123:13: note: (38) ‘controllers’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:131:12: note: (39) argument 1 (‘xstrdup(name)’) NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of ‘__builtin_strchr’ must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c: In function ‘update_cgroup_v1_resources’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: warning: leak of file descriptor ‘open(path_to_blkio, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1066:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1068:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1073:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (15) ‘open(path_to_blkio, 589824)’ leaks here; was opened at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: warning: leak of file descriptor ‘open(path_to_netclass, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (17) ‘open(path_to_netclass, 589824)’ leaks here; was opened at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: warning: leak of file descriptor ‘open(path_to_netprio, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (19) ‘open(path_to_netprio, 589824)’ leaks here; was opened at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: warning: leak of file descriptor ‘open(path_to_htlb, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 2 ... 3:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling ‘update_cgroup_v1_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to ‘update_cgroup_v1_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1114:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1116:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1120:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (15) ‘open(path_to_htlb, 589824)’ leaks here; was opened at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c: In function ‘update_cgroup_v2_resources’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: warning: leak of file descriptor ‘open(cgroup_path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following ‘case 1:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling ‘update_cgroup_v2_resources’ from ‘update_cgroup_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to ‘update_cgroup_v2_resources’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (15) ‘open(cgroup_path, 589824)’ leaks here; was opened at (14) <--[gcc] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-ebpf.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-ebpf.Tpo -c -o src/libcrun/libcrun_testing_a-ebpf.o `test -f 'src/libcrun/ebpf.c' || echo './'`src/libcrun/ebpf.c mv -f src/libcrun/.deps/libcrun_testing_a-ebpf.Tpo src/libcrun/.deps/libcrun_testing_a-ebpf.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-criu.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-criu.Tpo -c -o src/libcrun/libcrun_testing_a-criu.o `test -f 'src/libcrun/criu.c' || echo './'`src/libcrun/criu.c mv -f src/libcrun/.deps/libcrun_testing_a-criu.Tpo src/libcrun/.deps/libcrun_testing_a-criu.Po /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘read_all_progs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of ‘xrealloc(progs, cur_size * 4)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to ‘ebpf_attach_program’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:387:13: note: (2) calling ‘read_all_progs’ from ‘ebpf_attach_program’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (3) entry to ‘read_all_progs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:282:32: note: (4) following ‘true’ branch (when ‘cur_size <= 4096’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (6) calling ‘xrealloc’ from ‘read_all_progs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (7) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (9) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (12) returning to ‘read_all_progs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (13) ‘xrealloc(progs, cur_size * 4)’ leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_ebpf_load’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of ‘xrealloc(log, log_size)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:475:1: note: (1) entry to ‘libcrun_ebpf_load’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:504:6: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (4) calling ‘xrealloc’ from ‘libcrun_ebpf_load’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (7) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (10) returning to ‘libcrun_ebpf_load’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (11) ‘xrealloc(log, log_size)’ leaks here; was allocated at (6) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘read_all_progs’ at src/libcrun/ebpf.c:275:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-‘free’ of ‘progs’ [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function ‘read_all_progs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to ‘ebpf_attach_program’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:381:30: note: (2) first ‘free’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:387:13: note: (3) calling ‘read_all_progs’ from ‘ebpf_attach_program’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (4) entry to ‘read_all_progs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:282:32: note: (5) following ‘true’ branch (when ‘cur_size <= 4096’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (7) passing freed pointer ‘progs’ in call to ‘xrealloc’ from ‘read_all_progs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (8) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (9) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (12) returning to ‘read_all_progs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:275:26: note: (13) inlined call to ‘cleanup_freep’ from ‘read_all_progs’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘read_all_progs’ at src/libcrun/ebpf.c:275:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (14) second ‘free’ here; first ‘free’ was at (2) <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_ebpf_load’ at src/libcrun/ebpf.c:507:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-‘free’ of ‘log’ [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function ‘libcrun_ebpf_load’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:475:1: note: (1) entry to ‘libcrun_ebpf_load’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:504:6: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (4) passing freed pointer ‘log’ in call to ‘xrealloc’ from ‘libcrun_ebpf_load’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (9) returning to ‘libcrun_ebpf_load’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:507:26: note: (10) inlined call to ‘cleanup_freep’ from ‘libcrun_ebpf_load’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_ebpf_load’ at src/libcrun/ebpf.c:507:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (11) second ‘free’ here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function ‘read_all_progs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: warning: infinite loop [CWE-835] [-Wanalyzer-infinite-loop] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to ‘ebpf_attach_program’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (2) entry to ‘read_all_progs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (3) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (4) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (7) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (8) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (9) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (10) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (11) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (12) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (15) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (16) when ‘realloc’ succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (17) infinite loop here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (18) when ‘ret < 0’: always following ‘true’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.h:25: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:21: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (20) if it ever follows ‘true’ branch, it will always do so... <--[gcc] cc1: note: (21) ...to here cc1: note: (22) looping back... /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:131:12: warning: Potential leak of memory pointed to by 'wrapper' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘console_socket_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:181:1: note: (1) entry to ‘criu_notify’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:183:6: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:193:10: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:196:34: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:199:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:204:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:205:10: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (9) inlined call to ‘cleanup_closep’ from ‘criu_notify’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:35: <--[gcc] In function ‘cleanup_closep’, inlined from ‘criu_notify’ at src/libcrun/criu.c:188:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (11) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (12) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (13) inlined call to ‘cleanup_closep’ from ‘criu_notify’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘criu_notify’ at src/libcrun/criu.c:188:25: cc1: note: (14) calling ‘cleanup_closep.part.0’ from ‘criu_notify’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (15) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (16) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (17) following ‘true’ branch... <--[gcc] cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (19) second ‘close’ here; first ‘close’ was at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘image_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to ‘libcrun_container_checkpoint_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (21) assuming ‘image_fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:442:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:490:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:511:9: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:394:21: note: (26) inlined call to ‘cleanup_closep’ from ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_checkpoint_linux_criu’ at src/libcrun/criu.c:394:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (27) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:394:21: note: (29) inlined call to ‘cleanup_closep’ from ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_checkpoint_linux_criu’ at src/libcrun/criu.c:394:21: cc1: note: (30) calling ‘cleanup_closep.part.0’ from ‘libcrun_container_checkpoint_linux_criu’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (31) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (32) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (33) following ‘true’ branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (35) second ‘close’ here; first ‘close’ was at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘image_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (21) assuming ‘image_fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (28) following ‘false’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:32: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (30) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:739:21: note: (31) inlined call to ‘cleanup_closep’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_restore_linux_criu’ at src/libcrun/criu.c:739:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:736:21: note: (33) inlined call to ‘cleanup_closep’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_restore_linux_criu’ at src/libcrun/criu.c:736:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (34) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:736:21: note: (36) inlined call to ‘cleanup_closep’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_restore_linux_criu’ at src/libcrun/criu.c:736:21: cc1: note: (37) calling ‘cleanup_closep.part.0’ from ‘libcrun_container_restore_linux_criu’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (38) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (39) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (40) following ‘true’ branch... <--[gcc] cc1: note: (41) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (42) second ‘close’ here; first ‘close’ was at (39) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘root_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:654:1: note: (1) entry to ‘prepare_restore_mounts’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:659:17: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:661:23: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:669:10: note: (4) following ‘false’ branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:674:21: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:676:30: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:704:10: note: (9) assuming ‘root_fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:704:10: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:707:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:712:14: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:663:25: note: (13) inlined call to ‘cleanup_closep’ from ‘prepare_restore_mounts’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘prepare_restore_mounts’ at src/libcrun/criu.c:663:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (15) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:663:25: note: (17) inlined call to ‘cleanup_closep’ from ‘prepare_restore_mounts’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘prepare_restore_mounts’ at src/libcrun/criu.c:663:25: cc1: note: (18) calling ‘cleanup_closep.part.0’ from ‘prepare_restore_mounts’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (19) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (20) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (21) following ‘true’ branch... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (23) second ‘close’ here; first ‘close’ was at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_restore_linux_criu’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(*status.bundle)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:854:6: note: (28) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:37: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:22: note: (30) calling ‘xstrdup’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (34) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (35) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (36) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:22: note: (38) returning to ‘libcrun_container_restore_linux_criu’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (39) ‘xstrdup(*status.bundle)’ leaks here; was allocated at (34) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘restore_cgroup_v1_mount’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:294:22: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:249:22: note: (1) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:251:9: note: (2) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:258:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (5) following ‘false’ branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:274:6: note: (7) following ‘true’ branch (when ‘has_cgroup_mount != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:277:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:278:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:25: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:51: note: (13) following ‘true’ branch (when ‘from’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (15) ‘destination’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:287:26: note: (16) ‘destination’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:292:19: note: (17) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:293:17: note: (18) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:294:22: note: (19) dereference of NULL ‘strchr(subsystem, 58)’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:296:20: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:249:22: note: (1) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:251:9: note: (2) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:258:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (5) following ‘false’ branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:274:6: note: (7) following ‘true’ branch (when ‘has_cgroup_mount != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:277:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:278:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:25: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:51: note: (13) following ‘true’ branch (when ‘from’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (15) ‘destination’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:287:26: note: (16) ‘destination’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:292:19: note: (17) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:293:17: note: (18) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:296:20: note: (19) dereference of NULL ‘strchr(from, 58)’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘checkpoint_cgroup_v1_mount’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:361:22: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:325:22: note: (1) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:327:9: note: (2) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:342:6: note: (3) following ‘true’ branch (when ‘has_cgroup_mount != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:345:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:346:6: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:15: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:51: note: (9) following ‘true’ branch (when ‘from’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (11) ‘source_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:359:19: note: (12) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:360:17: note: (13) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:361:22: note: (14) dereference of NULL ‘strchr(subsystem, 58)’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:363:20: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:325:22: note: (1) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:327:9: note: (2) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:342:6: note: (3) following ‘true’ branch (when ‘has_cgroup_mount != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:345:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:346:6: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:15: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:51: note: (9) following ‘true’ branch (when ‘from’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (11) ‘source_path’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:359:19: note: (12) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:360:17: note: (13) when ‘strchr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:363:20: note: (14) dereference of NULL ‘strchr(from, 58)’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘libcrun_container_checkpoint_linux_criu’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: warning: leak of file descriptor ‘open(*cr_options.image_path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to ‘libcrun_container_checkpoint_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (21) ‘open(*cr_options.image_path, 589824)’ leaks here; was opened at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: warning: leak of file descriptor ‘open(*cr_options.work_path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_checkpoint_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to ‘libcrun_container_checkpoint_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:442:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:456:6: note: (22) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (24) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (25) ‘open(*cr_options.work_path, 589824)’ leaks here; was opened at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘prepare_restore_mounts’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: warning: leak of file descriptor ‘open(root, 524288)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:659:17: note: (1) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:661:23: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:669:10: note: (3) following ‘false’ branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:674:21: note: (5) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:676:30: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (8) ‘open(root, 524288)’ leaks here; was opened at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function ‘libcrun_container_restore_linux_criu’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: warning: leak of file descriptor ‘open(*cr_options.image_path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (21) ‘open(*cr_options.image_path, 589824)’ leaks here; was opened at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: warning: leak of file descriptor ‘open(*cr_options.work_path, 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:815:6: note: (28) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (30) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (31) ‘open(*cr_options.work_path, 589824)’ leaks here; was opened at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: warning: leak of file descriptor ‘open(**_134.path, 0)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:862:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:863:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:866:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:867:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:880:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:881:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:884:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:885:6: note: (36) following ‘false’ branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:897:17: note: (38) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:900:53: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:901:10: note: (40) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (42) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (44) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (45) ‘open(**_134.path, 0)’ leaks here; was opened at (44) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: warning: leak of file descriptor ‘open(**_151.path, 0)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling ‘load_wrapper’ from ‘libcrun_container_restore_linux_criu’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling ‘xmalloc0’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to ‘load_wrapper’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to ‘libcrun_container_restore_linux_criu’ from ‘load_wrapper’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:77make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-krun.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-krun.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-krun.o `test -f 'src/libcrun/handlers/krun.c' || echo './'`src/libcrun/handlers/krun.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-krun.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-krun.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-mono.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-mono.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-mono.o `test -f 'src/libcrun/handlers/mono.c' || echo './'`src/libcrun/handlers/mono.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-mono.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-mono.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-spin.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-spin.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-spin.o `test -f 'src/libcrun/handlers/spin.c' || echo './'`src/libcrun/handlers/spin.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-spin.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-spin.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-container.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-container.Tpo -c -o src/libcrun/libcrun_testing_a-container.o `test -f 'src/libcrun/container.c' || echo './'`src/libcrun/container.c mv -f src/libcrun/.deps/libcrun_testing_a-container.Tpo src/libcrun/.deps/libcrun_testing_a-container.Po 9:8: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:862:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:863:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:866:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:867:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:880:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:881:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:884:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:885:6: note: (36) following ‘false’ branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:897:17: note: (38) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:900:53: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:901:10: note: (40) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:913:10: note: (42) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (44) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (45) ‘open(**_151.path, 0)’ leaks here; was opened at (44) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function ‘libkrun_load’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:262:9: warning: unused variable ‘handle’ [-Wunused-variable] <--[gcc] 262 | void *handle; | ^~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:18: warning: Although the value stored to 'rootfsfd_cleanup' is used in the enclosing expression, the value is never actually read from 'rootfsfd_cleanup' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function ‘libkrun_configure_container’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: warning: ‘create_sev’ may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 248 | if (create_sev) | ^ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: ‘create_sev’ was declared here <--[gcc] 180 | bool create_sev; | ^~~~~~~~~~ In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:7: warning: Branch condition evaluates to a garbage value [core.uninitialized.Branch] <--[clang] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘rootfsfd_cleanup’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:167:1: note: (1) entry to ‘libkrun_configure_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:182:6: note: (2) following ‘false’ branch (when ‘rootfs’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (4) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:187:10: note: (5) assuming ‘rootfsfd_cleanup’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:187:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:191:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:177:21: note: (8) inlined call to ‘cleanup_closep’ from ‘libkrun_configure_container’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.h:23: <--[gcc] In function ‘cleanup_closep’, inlined from ‘libkrun_configure_container’ at src/libcrun/handlers/krun.c:177:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (9) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:177:21: note: (11) inlined call to ‘cleanup_closep’ from ‘libkrun_configure_container’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libkrun_configure_container’ at src/libcrun/handlers/krun.c:177:21: cc1: note: (12) calling ‘cleanup_closep.part.0’ from ‘libkrun_configure_container’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (13) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (14) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (15) following ‘true’ branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) second ‘close’ here; first ‘close’ was at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function ‘libkrun_configure_container’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: warning: leak of file descriptor ‘open(rootfs, 2621440)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:182:6: note: (1) following ‘false’ branch (when ‘rootfs’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (4) ‘open(rootfs, 2621440)’ leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: warning: use of uninitialized value ‘create_sev’ [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: (1) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: (2) capacity: 1 byte <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:191:6: note: (3) following ‘false’ branch (when ‘phase != 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:215:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:215:6: note: (5) following ‘false’ branch (when ‘phase == 2’)... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:225:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:235:11: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:236:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:239:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:240:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:242:14: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:245:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: note: (15) use of uninitialized value ‘create_sev’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/mono.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/spin.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:661:13: warning: Although the value stored to 'cwd_allocated' is used in the enclosing expression, the value is never actually read from 'cwd_allocated' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:937:7: warning: Access to field 'annotations' results in a dereference of a null pointer (loaded from variable 'def') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1091:12: warning: Potential leak of memory pointed to by 'rootfs' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1849:12: warning: Potential leak of memory pointed to by 'intelrdt' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2855:3: warning: Value stored to 'exec_fifo_fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3099:3: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3346:20: warning: Potential leak of memory pointed to by 'seccomp_fd_payload' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3399:20: warning: Potential leak of memory pointed to by 'seccomp_fd_payload' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3415:3: warning: Value stored to 'pipefd1' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3621:7: warning: Value stored to 'pipefd0' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3632:3: warning: Value stored to 'pipefd1' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3677:3: warning: Value stored to 'pipefd0' is never read [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_get_features’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(144)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling ‘xmalloc0’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (8) returning to ‘libcrun_container_get_features’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) ‘xmalloc0(144)’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘retrieve_mount_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0((num_mount_options + 1) * 8)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3924:1: note: (1) entry to ‘retrieve_mount_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (2) calling ‘xmalloc0’ from ‘retrieve_mount_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (8) returning to ‘retrieve_mount_options’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) ‘xmalloc0((num_mount_options + 1) * 8)’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_load_from_file’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘make_container(runtime_spec_schema_config_schema_parse_file(path, 0, & oci_error), path, 0)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (18) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (19) following ‘false’ branch (when ‘path’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (24) ‘make_container(runtime_spec_schema_config_schema_parse_file(path, 0, & oci_error), path, 0)’ leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_update_intel_rdt’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘libcrun_container_load_from_file(config_file, err)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (18) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (19) following ‘false’ branch (when ‘path’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (24) returning to ‘libcrun_container_update_intel_rdt’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (25) ‘libcrun_container_load_from_file(config_file, err)’ leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_restore’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘libcrun_container_load_from_file("config.json", err)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (11) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (14) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (15) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (17) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (18) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (19) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (27) returning to ‘libcrun_container_restore’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (28) ‘libcrun_container_load_from_file("config.json", err)’ leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘libcrun_container_load_from_file(config_file, err)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (19) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (22) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (23) following ‘false’ branch (when ‘path’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (25) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (27) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (28) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (29) ‘libcrun_container_load_from_file(config_file, err)’ leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘read_container_config_from_state’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘libcrun_container_load_from_file(config_file, err)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (4) calling ‘read_container_config_from_state’ from ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1557:1: note: (5) entry to ‘read_container_config_from_state’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1567:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1570:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1571:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (10) calling ‘libcrun_container_load_from_file’ from ‘read_container_config_from_state’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (19) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (22) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (23) following ‘false’ branch (when ‘path’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (25) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (27) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (28) returning to ‘read_container_config_from_state’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (29) ‘libcrun_container_load_from_file(config_file, err)’ leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_update’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(176)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3732:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3735:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3740:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3743:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3744:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3747:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3748:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:6: note: (12) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (14) calling ‘xmalloc0’ from ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (15) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (17) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (20) returning to ‘libcrun_container_update’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (21) ‘xmalloc0(176)’ leaks here; was allocated at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(120)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3732:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3735:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3740:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3743:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3744:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3747:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3748:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:6: note: (12) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (14) calling ‘xmalloc0’ from ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (15) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (18) returning to ‘libcrun_container_update’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3758:61: note: (19) calling ‘xmalloc0’ from ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (21) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (22) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3758:61: note: (25) returning to ‘libcrun_container_update’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (26) ‘xmalloc0(120)’ leaks here; was allocated at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_container_load_from_file’ at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of ‘<unknown>’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_restore’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (13) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (15) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (27) returning to ‘libcrun_container_restore’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (28) inlined call to ‘cleanup_freep’ from ‘libcrun_container_load_from_file’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_container_load_from_file’ at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (29) ‘<unknown>’ leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of ‘<unknown>’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_update_intel_rdt’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_update_intel_rdt’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (17) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (19) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (20) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (21) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (23) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (24) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (25) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (27) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (28) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (30) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (31) returning to ‘libcrun_container_update_intel_rdt’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (32) inlined call to ‘cleanup_freep’ from ‘libcrun_container_load_from_file’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_container_load_from_file’ at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (33) ‘<unknown>’ leaks here; was allocated at (23) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of ‘<unknown>’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (21) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (31) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (32) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (34) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (35) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (36) inlined call to ‘cleanup_freep’ from ‘libcrun_container_load_from_file’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_container_load_from_file’ at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (37) ‘<unknown>’ leaks here; was allocated at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of ‘<unknown>’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘read_container_config_from_state’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (4) calling ‘read_container_config_from_state’ from ‘libcrun_container_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1557:1: note: (5) entry to ‘read_container_config_from_state’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1567:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1570:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1571:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (10) calling ‘libcrun_container_load_from_file’ from ‘read_container_config_from_state’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (21) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (31) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (32) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (34) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (35) returning to ‘read_container_config_from_state’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (36) inlined call to ‘cleanup_freep’ from ‘libcrun_container_load_from_file’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘libcrun_container_load_from_file’ at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (37) ‘<unknown>’ leaks here; was allocated at (27) <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘console_socket_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:46: <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:25: <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following ‘false’ branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:18: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:10: note: (67) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3649:13: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3650:10: note: (69) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:18: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:10: note: (71) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:49: note: (72) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3657:14: note: (73) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3659:17: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:29: note: (75) inlined call to ‘cleanup_closep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3656:29: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (76) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (77) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:29: note: (78) inlined call to ‘cleanup_closep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3656:29: cc1: note: (79) calling ‘cleanup_closep.part.0’ from ‘libcrun_container_exec_with_options’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (80) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (81) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (82) following ‘true’ branch... <--[gcc] cc1: note: (83) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (84) second ‘close’ here; first ‘close’ was at (81) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘signalfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following ‘false’ branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following ‘false’ branch... <--[gcc] cc1: note: (66) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3678:6: note: (67) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:35: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:10: note: (69) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3695:38: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3705:15: note: (71) calling ‘wait_for_process’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1928:1: note: (72) entry to ‘wait_for_process’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1942:6: note: (73) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1945:20: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1956:6: note: (75) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1959:11: note: (76) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1959:6: note: (77) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1966:3: note: (78) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1968:6: note: (79) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1971:14: note: (80) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1972:6: note: (81) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1975:9: note: (82) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1976:6: note: (83) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1979:7: note: (84) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1979:6: note: (85) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1982:11: note: (86) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1982:6: note: (87) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2016:14: note: (88) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2017:6: note: (89) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2019:11: note: (90) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2028:6: note: (91) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1938:67: note: (92) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1931:21: note: (93) inlined call to ‘cleanup_closep’ from ‘wait_for_process’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘wait_for_process’ at src/libcrun/container.c:1931:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (94) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (95) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1931:21: note: (96) inlined call to ‘cleanup_closep’ from ‘wait_for_process’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘wait_for_process’ at src/libcrun/container.c:1931:21: cc1: note: (97) calling ‘cleanup_closep.part.0’ from ‘wait_for_process’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (98) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (99) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (100) following ‘true’ branch... <--[gcc] cc1: note: (101) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (102) second ‘close’ here; first ‘close’ was at (99) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘seccomp_receiver_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3311:21: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3339:26: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3351:10: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3355:7: note: (18) calling ‘close_and_reset’ from ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (19) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (20) following ‘true’ branch... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (22) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (23) following ‘true’ branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (25) second ‘close’ here; first ‘close’ was at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘seccomp_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following ‘false’ branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3636:6: note: (65) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3637:5: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3637:5: note: (67) calling ‘close_and_reset’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (68) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (69) following ‘true’ branch... <--[gcc] cc1: note: (70) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (71) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (72) following ‘true’ branch... <--[gcc] cc1: note: (73) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (74) second ‘close’ here; first ‘close’ was at (71) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘terminal_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following ‘false’ branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:18: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:10: note: (67) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3649:13: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3650:10: note: (69) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:18: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:10: note: (71) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:49: note: (72) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3657:14: note: (73) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3659:17: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3660:14: note: (75) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3662:11: note: (76) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3662:11: note: (77) calling ‘close_and_reset’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (78) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (79) following ‘true’ branch... <--[gcc] cc1: note: (80) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (81) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (82) following ‘true’ branch... <--[gcc] cc1: note: (83) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (84) second ‘close’ here; first ‘close’ was at (81) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘own_seccomp_receiver_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:6: note: (41) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (43) calling ‘get_seccomp_receiver_fd’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2244:1: note: (44) entry to ‘get_seccomp_receiver_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2254:6: note: (45) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2259:13: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2260:10: note: (47) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2263:16: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (49) returning to ‘libcrun_container_exec_with_options’ from ‘get_seccomp_receiver_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3539:10: note: (50) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:29: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (52) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (54) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (56) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (58) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (59) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (61) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (62) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (63) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (64) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (65) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (67) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (68) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (69) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (70) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (71) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (72) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (73) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (74) following ‘false’ branch... <--[gcc] cc1: note: (75) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (76) following ‘false’ branch... <--[gcc] cc1: note: (77) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3678:6: note: (78) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:35: note: (79) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:10: note: (80) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3685:31: note: (81) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3686:14: note: (82) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3689:17: note: (83) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3689:17: note: (84) calling ‘close_and_reset’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (85) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (86) following ‘true’ branch... <--[gcc] cc1: note: (87) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (88) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (89) following ‘true’ branch... <--[gcc] cc1: note: (90) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (91) second ‘close’ here; first ‘close’ was at (88) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘seccomp_fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:73: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:39: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3315:57: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3339:26: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3351:10: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (20) calling ‘close_and_reset’ from ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (21) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (22) following ‘true’ branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (24) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (25) following ‘true’ branch... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (27) second ‘close’ here; first ‘close’ was at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_get_features’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup("1.0.0")’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling ‘xmalloc0’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (6) returning to ‘libcrun_container_get_features’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (7) calling ‘xstrdup’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (8) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (9) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (12) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (13) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (15) returning to ‘libcrun_container_get_features’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (16) ‘xstrdup("1.0.0")’ leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup("1.1.0+dev")’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling ‘xmalloc0’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (6) returning to ‘libcrun_container_get_features’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (7) calling ‘xstrdup’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (8) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (9) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (11) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (12) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (13) returning to ‘libcrun_container_get_features’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3961:30: note: (14) calling ‘xstrdup’ from ‘libcrun_container_get_features’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (15) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (16) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (19) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3961:30: note: (22) returning to ‘libcrun_container_get_features’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (23) ‘xstrdup("1.1.0+dev")’ leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘retrieve_mount_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(*<unknown>.name)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3924:1: note: (1) entry to ‘retrieve_mount_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (2) calling ‘xmalloc0’ from ‘retrieve_mount_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (6) returning to ‘retrieve_mount_options’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3940:24: note: (7) following ‘true’ branch (when ‘num_mount_options > i’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:60: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:33: note: (9) calling ‘xstrdup’ from ‘retrieve_mount_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (10) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (11) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (13) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (14) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (15) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:33: note: (17) returning to ‘retrieve_mount_options’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (18) ‘xstrdup(*<unknown>.name)’ leaks here; was allocated at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(*_70->process.selinux_label)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:10: note: (52) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (54) calling ‘xstrdup’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (62) returning to ‘libcrun_container_exec_with_options’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (63) ‘xstrdup(*_70->process.selinux_label)’ leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(*_75->process.apparmor_profile)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3600:10: note: (52) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (54) calling ‘xstrdup’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (62) returning to ‘libcrun_container_exec_with_options’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (63) ‘xstrdup(*_75->process.apparmor_profile)’ leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_load_from_file’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: warning: leak of ‘<unknown>’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_restore’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (13) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (15) calling ‘xstrdup’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to ‘make_container’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (27) ‘<unknown>’ leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘container_delete_internal’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:15: warning: dereference of NULL ‘container’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4088:1: note: (1) entry to ‘libcrun_container_checkpoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4094:42: note: (2) ‘container’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4094:42: note: (3) ‘container’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4097:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4100:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4101:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4103:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4103:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4106:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4107:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4109:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4109:9: note: (12) ‘container’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4110:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4113:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4113:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4114:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4114:12: note: (17) calling ‘container_delete_internal’ from ‘libcrun_container_checkpoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1643:1: note: (18) entry to ‘container_delete_internal’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1648:42: note: (19) ‘container’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1653:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1667:19: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1669:6: note: (22) following ‘true’ branch (when ‘force != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1687:15: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1687:6: note: (24) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1689:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1689:10: note: (26) following ‘true’ branch (when ‘def’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1691:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1692:14: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:26: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:26: note: (30) ‘container’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:15: note: (31) dereference of NULL ‘container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘exec_process_entrypoint’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: warning: double ‘close’ of file descriptor ‘pipefd1’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3311:21: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3359:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (16) calling ‘maybe_chown_std_streams’ from ‘exec_process_entrypoint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1000:1: note: (17) entry to ‘maybe_chown_std_streams’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1005:17: note: (18) following ‘true’ branch (when ‘i != 3’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:13: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:13: note: (20) when ‘isatty’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:10: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1005:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (23) returning to ‘exec_process_entrypoint’ from ‘maybe_chown_std_streams’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3363:6: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3366:14: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3372:6: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3375:6: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: note: (28) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:3: note: (29) following ‘true’ branch... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: note: (31) second ‘close’ here; first ‘close’ was at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: warning: dereference of NULL ‘process’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3211:1: note: (1) entry to ‘libcrun_container_exec_process_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3219:10: note: (2) calling ‘libcrun_container_exec_with_options’ from ‘libcrun_container_exec_process_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (3) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (4) ‘process’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (5) ‘process’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (6) ‘process’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (15) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (16) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (19) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (20) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (21) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (22) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (25) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (26) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (28) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (29) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (35) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (42) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (44) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:6: note: (46) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:29: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (50) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (52) dereference of NULL ‘process’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:32: warning: leak of ‘*process.selinux_label’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:10: note: (52) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (54) calling ‘xstrdup’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (62) returning to ‘libcrun_container_exec_with_options’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:32: note: (63) ‘*process.selinux_label’ leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:35: warning: leak of ‘*process.apparmor_profile’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3600:10: note: (52) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (54) calling ‘xstrdup’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (62) returning to ‘libcrun_container_exec_with_options’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:35: note: (63) ‘*process.apparmor_profile’ leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: warning: double ‘close’ of file descriptor ‘pipefd0’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (48) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (49) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (50) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (51) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (52) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (53) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (55) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (56) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (57) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (58) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (59) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (60) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (61) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (62) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (64) following ‘true’ branch... <--[gcc] cc1: note: (65) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: note: (66) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:7: note: (67) following ‘true’ branch... <--[gcc] cc1: note: (68) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: note: (69) second ‘close’ here; first ‘close’ was at (66) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: warning: double ‘close’ of file descriptor ‘pipefd1’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling ‘libcrun_container_load_from_file’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling ‘make_container’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling ‘xmalloc0’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to ‘make_container’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following ‘false’ branch (when ‘config’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to ‘libcrun_container_load_from_file’ from ‘make_container’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to ‘libcrun_container_exec_with_options’ from ‘libcrun_container_load_from_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to ‘cgroup_status_freep’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘cgroup_status_freep’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘libcrun_container_exec_with_options’ <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘libcrun_container_exec_with_options’ at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function ‘libcrun_container_exec_with_options’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (48) when ‘pipe2’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (49) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (50) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (51) calling ‘initialize_security’ from ‘libcrun_container_exec_with_options’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (52) entry to ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (53) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (55) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (56) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (57) returning to ‘libcrun_container_exec_with_options’ from ‘initialize_security’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (58) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (59) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (60) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (61) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (62) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (64) following ‘false’ branch... <--[gcc] cc1: note: (65) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: note: (66) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:3: note: (67) following ‘true’ branch... <--[gcc] cc1: note: (68) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: note: (69) second ‘close’ here; first ‘close’ was at (66) <--[gcc] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-wasmedge.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-wasmedge.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-wasmedge.o `test -f 'src/libcrun/handlers/wasmedge.c' || echo './'`src/libcrun/handlers/wasmedge.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-wasmedge.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-wasmedge.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-utils.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-utils.Tpo -c -o src/libcrun/libcrun_testing_a-utils.o `test -f 'src/libcrun/utils.c' || echo './'`src/libcrun/utils.c mv -f src/libcrun/.deps/libcrun_testing_a-utils.Tpo src/libcrun/.deps/libcrun_testing_a-utils.Po /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmedge.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:21: <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: ‘fd’ may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 104 | if (*pp >= 0) | ^~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_all_file_at’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: ‘fd’ declared here <--[gcc] 1040 | cleanup_close int fd; | ^~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:314:7: warning: Potential leak of memory pointed to by 'tmp' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:395:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:445:16: warning: Potential leak of memory pointed to by 'tmp_buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:587:7: warning: Potential leak of memory pointed to by 'cur' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1089:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1123:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1272:3: warning: Value stored to 'epollfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1429:11: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1444:20: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1492:15: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1492:15: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1773:3: warning: Value stored to 'cfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:9: warning: Although the value stored to 'tmp' is used in the enclosing expression, the value is never actually read from 'tmp' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1925:13: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2003:12: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2024:10: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2126:11: warning: Value stored to 'destfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2149:11: warning: Value stored to 'srcfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2149:19: warning: Although the value stored to 'destfd' is used in the enclosing expression, the value is never actually read from 'destfd' [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘read_all_fd_with_size_hint’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(allocated + 1)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (1) entry to ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (2) calling ‘read_all_file’ from ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (3) entry to ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (4) calling ‘read_all_file_at’ from ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (5) entry to ‘read_all_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1043:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1046:10: note: (7) inlined call to ‘read_all_fd’ from ‘read_all_file_at’ <--[gcc] In function ‘read_all_fd’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1046:10: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (9) calling ‘read_all_fd_with_size_hint’ from ‘read_all_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_all_fd_with_size_hint’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:975:1: note: (10) entry to ‘read_all_fd_with_size_hint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:983:6: note: (11) following ‘false’ branch (when ‘size_hint == 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (13) calling ‘get_file_size’ from ‘read_all_fd_with_size_hint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:666:1: note: (14) entry to ‘get_file_size’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:676:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:682:14: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (17) returning to ‘read_all_fd_with_size_hint’ from ‘get_file_size’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:988:10: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:991:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:995:9: note: (20) calling ‘xmalloc’ from ‘read_all_fd_with_size_hint’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (21) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (22) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (23) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (24) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:995:9: note: (26) returning to ‘read_all_fd_with_size_hint’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (27) ‘xmalloc(allocated + 1)’ leaks here; was allocated at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘copy_from_fd_to_fd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(get_page_size())’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 32768:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (21) calling ‘copy_from_fd_to_fd’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1277:1: note: (22) entry to ‘copy_from_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1302:16: note: (23) calling ‘xmalloc’ from ‘copy_from_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1302:16: note: (29) returning to ‘copy_from_fd_to_fd’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (30) ‘xmalloc(get_page_size())’ leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘copy_xattr’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc((long unsigned int)(xattr_len + 1))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1981:1: note: (1) entry to ‘copy_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1988:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1996:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1996:6: note: (4) following ‘false’ branch (when ‘xattr_len != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:28: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:9: note: (6) calling ‘xmalloc’ from ‘copy_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (9) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:9: note: (12) returning to ‘copy_xattr’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (13) ‘xmalloc((long unsigned int)(xattr_len + 1))’ leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘safe_read_xattr’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc((long unsigned int)(current_size + 1))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling ‘xmalloc’ from ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (8) returning to ‘safe_read_xattr’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (9) ‘xmalloc((long unsigned int)(current_size + 1))’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of ‘xrealloc(buffer, (long unsigned int)(current_size + 1))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling ‘xmalloc’ from ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (6) returning to ‘safe_read_xattr’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1958:10: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (9) following ‘false’ branch (when ‘current_size <= s’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1964:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (11) calling ‘xrealloc’ from ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (12) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (13) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (17) returning to ‘safe_read_xattr’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (18) ‘xrealloc(buffer, (long unsigned int)(current_size + 1))’ leaks here; was allocated at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘safe_readlinkat’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of ‘xrealloc(tmp_buf, (long unsigned int)(buf_size + 1))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 40960:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (17) calling ‘safe_readlinkat’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (18) entry to ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (19) following ‘false’ branch (when ‘tmp_buf’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (21) calling ‘xrealloc’ from ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (22) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (23) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to ‘safe_readlinkat’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (28) ‘xrealloc(tmp_buf, (long unsigned int)(buf_size + 1))’ leaks here; was allocated at (23) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘safe_read_xattr’ at src/libcrun/utils.c:1948:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-‘free’ of ‘buffer’ [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘safe_read_xattr’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling ‘xmalloc’ from ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (8) returning to ‘safe_read_xattr’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1958:10: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (11) following ‘false’ branch (when ‘current_size <= s’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1964:20: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (13) calling ‘xrealloc’ from ‘safe_read_xattr’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (14) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (15) first ‘free’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (16) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (19) returning to ‘safe_read_xattr’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1948:22: note: (20) inlined call to ‘cleanup_freep’ from ‘safe_read_xattr’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘safe_read_xattr’ at src/libcrun/utils.c:1948:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (21) second ‘free’ here; first ‘free’ was at (15) <--[gcc] In function ‘cleanup_freep’, inlined from ‘safe_readlinkat’ at src/libcrun/utils.c:432:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-‘free’ of ‘tmp_buf’ [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘safe_readlinkat’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2089:26: note: (6) first ‘free’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (9) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (10) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (11) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (13) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (16) following ‘case 40960:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (18) calling ‘safe_readlinkat’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (19) entry to ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (20) following ‘false’ branch (when ‘tmp_buf’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (22) passing freed pointer ‘tmp_buf’ in call to ‘xrealloc’ from ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (23) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to ‘safe_readlinkat’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:432:22: note: (28) inlined call to ‘cleanup_freep’ from ‘safe_readlinkat’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘safe_readlinkat’ at src/libcrun/utils.c:432:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (29) second ‘free’ here; first ‘free’ was at (6) <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value ‘fd’ [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_all_file_at’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (1) entry to ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (2) calling ‘read_all_file’ from ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (3) entry to ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (4) calling ‘read_all_file_at’ from ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (5) entry to ‘read_all_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (6) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (7) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (8) inlined call to ‘cleanup_closep’ from ‘read_all_file_at’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (9) use of uninitialized value ‘fd’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value ‘fd’ [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_all_file_at’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2508:1: note: (1) entry to ‘get_overflow_gid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2512:6: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2514:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2514:13: note: (4) calling ‘read_file_as_long_or_default’ from ‘get_overflow_gid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (5) entry to ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (6) calling ‘read_all_file’ from ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (7) entry to ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (8) calling ‘read_all_file_at’ from ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (9) entry to ‘read_all_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (10) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (11) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (12) inlined call to ‘cleanup_closep’ from ‘read_all_file_at’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (13) use of uninitialized value ‘fd’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value ‘fd’ [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_all_file_at’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2495:1: note: (1) entry to ‘get_overflow_uid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2499:6: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2501:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2501:13: note: (4) calling ‘read_file_as_long_or_default’ from ‘get_overflow_uid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (5) entry to ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (6) calling ‘read_all_file’ from ‘read_file_as_long_or_default’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (7) entry to ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (8) calling ‘read_all_file_at’ from ‘read_all_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (9) entry to ‘read_all_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (10) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (11) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (12) inlined call to ‘cleanup_closep’ from ‘read_all_file_at’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_all_file_at’ at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (13) use of uninitialized value ‘fd’ here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:26: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘destdirfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 16384:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2129:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2131:14: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2134:19: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2135:14: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2138:20: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2139:14: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2143:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2144:14: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (25) calling ‘copy_recursive_fd_to_fd’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (26) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (29) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (31) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (33) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2102:38: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (35) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (36) following ‘false’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2075:20: note: (38) inlined call to ‘cleanup_dirp’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_dirp’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2075:20: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (39) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:198:5: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2074:21: note: (41) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2074:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (42) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (43) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2074:21: note: (44) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2074:21: cc1: note: (45) calling ‘cleanup_closep.part.0’ from ‘copy_recursive_fd_to_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (46) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (47) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (48) following ‘true’ branch... <--[gcc] cc1: note: (49) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (50) second ‘close’ here; first ‘close’ was at (47) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘srcfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 16384:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2129:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2131:14: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2134:19: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2135:14: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2138:20: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2139:14: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2143:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2144:14: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (25) calling ‘copy_recursive_fd_to_fd’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (26) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (29) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (31) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (35) following ‘case 32768:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (39) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2113:42: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (41) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (42) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (43) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2087:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (45) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (46) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (47) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2087:25: cc1: note: (48) calling ‘cleanup_closep.part.0’ from ‘copy_recursive_fd_to_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (49) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (50) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (51) following ‘true’ branch... <--[gcc] cc1: note: (52) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (53) second ‘close’ here; first ‘close’ was at (50) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘destfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 32768:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2116:14: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2120:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2121:14: note: (23) following ‘false’ branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (25) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (26) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (27) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (29) inlined call to ‘cleanup_closep’ from ‘copy_recursive_fd_to_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘copy_recursive_fd_to_fd’ at src/libcrun/utils.c:2088:25: cc1: note: (30) calling ‘cleanup_closep.part.0’ from ‘copy_recursive_fd_to_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (31) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (32) second ‘close’ here; first ‘close’ was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘find_executable’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(getenv("PATH"))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1873:1: note: (1) entry to ‘find_executable’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1882:6: note: (2) following ‘false’ branch (when ‘executable_path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:22: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:33: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:66: note: (6) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:63: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:22: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:6: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:24: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:15: note: (11) calling ‘xstrdup’ from ‘find_executable’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (12) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (13) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (16) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (17) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:15: note: (19) returning to ‘find_executable’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) ‘xstrdup(getenv("PATH"))’ leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(executable_path)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1873:1: note: (1) entry to ‘find_executable’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1882:6: note: (2) following ‘false’ branch (when ‘executable_path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:22: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:33: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (8) calling ‘check_access’ from ‘find_executable’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1846:1: note: (9) entry to ‘check_access’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1859:9: note: (10) inlined call to ‘get_file_type’ from ‘check_access’ <--[gcc] In function ‘get_file_type’, inlined from ‘check_access’ at src/libcrun/utils.c:1859:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:241:10: note: (11) calling ‘get_file_type_at’ from ‘check_access’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘find_executable’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:209:1: note: (12) entry to ‘get_file_type_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:211:49: note: (13) following ‘false’ branch (when ‘path’ is non-NULL)... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:80: note: (15) following ‘false’ branch (when ‘nofollow == 0’)... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:9: note: (17) following ‘true’ branch (when ‘path’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1859:9: note: (19) inlined call to ‘get_file_type’ from ‘check_access’ <--[gcc] In function ‘get_file_type’, inlined from ‘check_access’ at src/libcrun/utils.c:1859:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:241:10: note: (20) returning to ‘check_access’ from ‘get_file_type_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘find_executable’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (21) returning to ‘find_executable’ from ‘check_access’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1911:10: note: (22) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (24) calling ‘xstrdup’ from ‘find_executable’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (25) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (26) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (30) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (32) returning to ‘find_executable’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) ‘xstrdup(executable_path)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘copy_recursive_fd_to_fd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: warning: leak of ‘fdopendir(srcdirfd)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: note: (1) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: note: (2) ‘fdopendir(srcdirfd)’ leaks here; wamake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-io_priority.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-io_priority.Tpo -c -o src/libcrun/libcrun_testing_a-io_priority.o `test -f 'src/libcrun/io_priority.c' || echo './'`src/libcrun/io_priority.c mv -f src/libcrun/.deps/libcrun_testing_a-io_priority.Tpo src/libcrun/.deps/libcrun_testing_a-io_priority.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-wasmtime.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-wasmtime.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-wasmtime.o `test -f 'src/libcrun/handlers/wasmtime.c' || echo './'`src/libcrun/handlers/wasmtime.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-wasmtime.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-wasmtime.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_testing_a-wasmer.o -MD -MP -MF src/libcrun/handlers/.deps/libcrun_testing_a-wasmer.Tpo -c -o src/libcrun/handlers/libcrun_testing_a-wasmer.o `test -f 'src/libcrun/handlers/wasmer.c' || echo './'`src/libcrun/handlers/wasmer.c mv -f src/libcrun/handlers/.deps/libcrun_testing_a-wasmer.Tpo src/libcrun/handlers/.deps/libcrun_testing_a-wasmer.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-scheduler.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-scheduler.Tpo -c -o src/libcrun/libcrun_testing_a-scheduler.o `test -f 'src/libcrun/scheduler.c' || echo './'`src/libcrun/scheduler.c mv -f src/libcrun/.deps/libcrun_testing_a-scheduler.Tpo src/libcrun/.deps/libcrun_testing_a-scheduler.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-mount_flags.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-mount_flags.Tpo -c -o src/libcrun/libcrun_testing_a-mount_flags.o `test -f 'src/libcrun/mount_flags.c' || echo './'`src/libcrun/mount_flags.c mv -f src/libcrun/.deps/libcrun_testing_a-mount_flags.Tpo src/libcrun/.deps/libcrun_testing_a-mount_flags.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-signals.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-signals.Tpo -c -o src/libcrun/libcrun_testing_a-signals.o `test -f 'src/libcrun/signals.c' || echo './'`src/libcrun/signals.c mv -f src/libcrun/.deps/libcrun_testing_a-signals.Tpo src/libcrun/.deps/libcrun_testing_a-signals.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-seccomp_notify.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-seccomp_notify.Tpo -c -o src/libcrun/libcrun_testing_a-seccomp_notify.o `test -f 'src/libcrun/seccomp_notify.c' || echo './'`src/libcrun/seccomp_notify.c mv -f src/libcrun/.deps/libcrun_testing_a-seccomp_notify.Tpo src/libcrun/.deps/libcrun_testing_a-seccomp_notify.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-terminal.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-terminal.Tpo -c -o src/libcrun/libcrun_testing_a-terminal.o `test -f 'src/libcrun/terminal.c' || echo './'`src/libcrun/terminal.c mv -f src/libcrun/.deps/libcrun_testing_a-terminal.Tpo src/libcrun/.deps/libcrun_testing_a-terminal.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-status.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-status.Tpo -c -o src/libcrun/libcrun_testing_a-status.o `test -f 'src/libcrun/status.c' || echo './'`src/libcrun/status.c mv -f src/libcrun/.deps/libcrun_testing_a-status.Tpo src/libcrun/.deps/libcrun_testing_a-status.Po s allocated at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: warning: double ‘close’ of file descriptor ‘srcdirfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (1) following ‘true’ branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: note: (3) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:7: note: (4) following ‘true’ branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: note: (6) second ‘close’ here; first ‘close’ was at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: warning: double ‘close’ of file descriptor ‘destfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following ‘case 32768:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2116:14: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2120:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2121:14: note: (23) following ‘false’ branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (25) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:11: note: (26) following ‘true’ branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (28) second ‘close’ here; first ‘close’ was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: warning: use of NULL ‘target_buf’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2089:26: note: (6) ‘target_buf’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (9) calling ‘copy_rec_stat_file_at’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (10) entry to ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (11) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (13) returning to ‘copy_recursive_fd_to_fd’ from ‘copy_rec_stat_file_at’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (16) following ‘case 40960:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (18) calling ‘safe_readlinkat’ from ‘copy_recursive_fd_to_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (19) entry to ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (20) following ‘false’ branch (when ‘tmp_buf’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (22) calling ‘xrealloc’ from ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (23) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to ‘safe_readlinkat’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (28) returning to ‘copy_recursive_fd_to_fd’ from ‘safe_readlinkat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2156:14: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (31) ‘target_buf’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (32) ‘target_buf’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (33) argument 1 (‘target_buf’) NULL where non-null expected <--[gcc] /usr/include/unistd.h:847:12: note: argument 1 of ‘symlinkat’ must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function ‘read_file_as_long_or_default’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2484:9: warning: use of NULL ‘content’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2470:22: note: (1) ‘content’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2477:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2483:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2484:9: note: (4) argument 1 (‘content’) NULL where non-null expected <--[gcc] In file included from /usr/include/features.h:511, <--[gcc] from /usr/include/bits/libc-header-start.h:33, <--[gcc] from /usr/include/stdio.h:28, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:22: <--[gcc] /usr/include/stdlib.h:215:17: note: argument 1 of ‘strtol’ must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/io_priority.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmtime.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmer.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/scheduler.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/mount_flags.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/signals.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:105:13: warning: Potential leak of memory pointed to by 'b' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:32: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_load_seccomp_notify_plugins’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (12) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (15) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (16) ‘xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif)’ leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif_resp)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (17) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (20) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (21) ‘xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif_resp)’ leaks here; was allocated at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(48)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (18) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (19) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (21) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (22) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (25) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (26) ‘xmalloc0(48)’ leaks here; was allocated at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(plugins)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling ‘xmalloc’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (18) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (19) calling ‘xmalloc0’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (23) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:104:7: note: (24) calling ‘xstrdup’ from ‘libcrun_load_seccomp_notify_plugins’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (25) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (26) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (30) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:104:7: note: (32) returning to ‘libcrun_load_seccomp_notify_plugins’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) ‘xstrdup(plugins)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:59:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:40:1: note: (1) entry to ‘libcrun_new_terminal’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:26: note: (2) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (3) assuming ‘fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:48:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:21: note: (6) inlined call to ‘cleanup_closep’ from ‘libcrun_new_terminal’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:25: <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_new_terminal’ at src/libcrun/terminal.c:44:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (7) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (8) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:21: note: (9) inlined call to ‘cleanup_closep’ from ‘libcrun_new_terminal’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_new_terminal’ at src/libcrun/terminal.c:44:21: cc1: note: (10) calling ‘cleanup_closep.part.0’ from ‘libcrun_new_terminal’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (11) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (12) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (13) following ‘true’ branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (15) second ‘close’ here; first ‘close’ was at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:95:1: note: (1) entry to ‘libcrun_set_stdio’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:26: note: (2) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (3) assuming ‘fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (4) following ‘false’ branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (6) following ‘true’ branch (when ‘i != 3’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (8) inlined call to ‘cleanup_closep’ from ‘libcrun_set_stdio’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_set_stdio’ at src/libcrun/terminal.c:98:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (9) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (11) inlined call to ‘cleanup_closep’ from ‘libcrun_set_stdio’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_set_stdio’ at src/libcrun/terminal.c:98:21: cc1: note: (12) calling ‘cleanup_closep.part.0’ from ‘libcrun_set_stdio’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (13) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (14) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (15) following ‘true’ branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) second ‘close’ here; first ‘close’ was at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_set_stdio’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:106:1: warning: leak of file descriptor ‘ret’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:95:1: note: (1) entry to ‘libcrun_set_stdio’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (2) following ‘false’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (4) following ‘true’ branch (when ‘i != 3’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (7) assuming ‘ret’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:23: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (10) following ‘true’ branch (when ‘i != 3’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (12) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (13) assuming ‘ret’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:23: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (16) inlined call to ‘cleanup_closep’ from ‘libcrun_set_stdio’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_set_stdio’ at src/libcrun/terminal.c:98:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (17) following ‘true’ branch... <--[gcc] In function ‘libcrun_set_stdio’: cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:106:1: note: (19) ‘ret’ leaks here; was opened at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_new_terminal’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(&buf)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:40:1: note: (1) entry to ‘libcrun_new_terminal’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:48:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:49:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:52:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:53:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (8) calling ‘xstrdup’ from ‘libcrun_new_terminal’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (9) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (10) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (12) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (13) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (14) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (15) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (16) returning to ‘libcrun_new_terminal’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (17) ‘xstrdup(&buf)’ leaks here; was allocated at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:444:7: warning: Potential leak of memory pointed to by 'run_directory' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_container_delete_status’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:515:15: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:546:3: warning: Value stored to 'dfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:549:12: warning: Potential leak of memory pointed to by 'dir' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:617:10: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:556:1: warning: leak of file descriptor ‘rundir_dfd’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling ‘get_run_directory’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (10) returning to ‘libcrun_container_delete_status’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (11) following ‘false’ branch... <--[gcc] cc1: note: (12) ...to here In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (13) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:16: note: (14) assuming ‘open(get_run_directory(state_root), 589824)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following ‘true’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:537:34: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:528:21: note: (17) inlined call to ‘cleanup_closep’ from ‘libcrun_container_delete_status’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_container_delete_status’ at src/libcrun/status.c:528:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (18) following ‘false’ branch... <--[gcc] In function ‘libcrun_container_delete_status’: cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:556:1: note: (20) ‘rundir_dfd’ leaks here; was opened at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_get_containers_list’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(16)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling ‘get_run_directory’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to ‘libcrun_get_containers_list’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following ‘true’ branch (when ‘next’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling ‘xmalloc’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (29) returning to ‘libcrun_get_containers_list’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (30) ‘xmalloc(16)’ leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(16)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling ‘get_run_directory’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to ‘libcrun_get_containers_list’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following ‘true’ branch (when ‘next’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling ‘xmalloc’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (29) returning to ‘libcrun_get_containers_list’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (30) calling ‘xstrdup’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (34) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (36) returning to ‘libcrun_get_containers_list’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (37) ‘xmalloc(16)’ leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:642:1: note: (1) entry to ‘libcrun_check_pid_valid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:648:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (4) calling ‘read_pid_stat’ from ‘libcrun_check_pid_valid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:109:1: note: (5) entry to ‘read_pid_stat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:120:6: note: (7) assuming ‘fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:120:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:131:9: note: (9) inlined call to ‘read_all_fd’ from ‘read_pid_stat’ <--[gcc] In function ‘read_all_fd’, inlined from ‘read_pid_stat’ at src/libcrun/status.c:131:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:112:21: note: (11) inlined call to ‘cleanup_closep’ from ‘read_pid_stat’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_pid_stat’ at src/libcrun/status.c:112:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (12) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (13) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:112:21: note: (14) inlined call to ‘cleanup_closep’ from ‘read_pid_stat’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘read_pid_stat’ at src/libcrun/status.c:112:21: cc1: note: (15) calling ‘cleanup_closep.part.0’ from ‘read_pid_stat’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (16) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (18) following ‘true’ branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (20) second ‘close’ here; first ‘close’ was at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd_cleanup’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling ‘get_run_directory’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (12) returning to ‘libcrun_container_delete_status’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (13) following ‘false’ branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:539:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:540:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (19) calling ‘rmdirfd’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (20) entry to ‘rmdirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (21) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:471:46: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (22) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (24) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:471:46: cc1: note: (25) calling ‘cleanup_closep.part.0’ from ‘rmdirfd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (26) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (27) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (28) following ‘true’ branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (30) second ‘close’ here; first ‘close’ was at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘cfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling ‘get_run_directory’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (12) returning to ‘libcrun_container_delete_status’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (13) following ‘false’ branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:539:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:540:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (19) calling ‘rmdirfd’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (20) entry to ‘rmdirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:474:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:478:14: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:480:26: note: (23) following ‘true’ branch (when ‘de’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:482:22: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:482:10: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:486:13: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:487:10: note: (27) following ‘true’ branch (when ‘ret < 0’)... <--[gcc] cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:503:14: note: (29) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:508:18: note: (31) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (33) calling ‘rmdirfd’ from ‘rmdirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (34) entry to ‘rmdirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:474:6: note: (35) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:475:34: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (37) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:471:46: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (38) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (40) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:471:46: cc1: note: (41) calling ‘cleanup_closep.part.0’ from ‘rmdirfd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (42) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (43) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (44) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:471:46: cc1: note: (45) returning to ‘rmdirfd’ from ‘cleanup_closep.part.0’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:469:20: note: (46) inlined call to ‘cleanup_dirp’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_dirp’, inlined from ‘rmdirfd’ at src/libcrun/status.c:469:20: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (47) following ‘false’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (48) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (49) returning to ‘rmdirfd’ from ‘rmdirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (50) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:505:33: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (51) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (52) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (53) inlined call to ‘cleanup_closep’ from ‘rmdirfd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘rmdirfd’ at src/libcrun/status.c:505:33: cc1: note: (54) calling ‘cleanup_closep.part.0’ from ‘rmdirfd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (55) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (56) second ‘close’ here; first ‘close’ was at (43) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_get_containers_list’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(&*next.d_name)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling ‘get_run_directory’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to ‘libcrun_get_containers_list’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following ‘true’ branch (when ‘next’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling ‘xmalloc’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (25) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (27) returning to ‘libcrun_get_containers_list’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (28) calling ‘xstrdup’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (29) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (30) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (32) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (34) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (36) returning to ‘libcrun_get_containers_list’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (37) ‘xstrdup(&*next.d_name)’ leaks here; was allocated at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_container_delete_status’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: warning: leak of ‘get_run_directory(state_root)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling ‘get_run_directory’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘true’ branch (when ‘state_root’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (6) calling ‘xstrdup’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (7) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (8) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (11) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (12) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (13) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (14) returning to ‘get_run_directory’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:66:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (19) returning to ‘libcrun_container_delete_status’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (20) ‘get_run_directory(state_root)’ leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘read_pid_stat’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: warning: leak of file descriptor ‘open(&pid_stat_file, 524288)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:642:1: note: (1) entry to ‘libcrun_check_pid_valid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:648:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (4) calling ‘read_pid_stat’ from ‘libcrun_check_pid_valid’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:109:1: note: (5) entry to ‘read_pid_stat’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (7) ‘open(&pid_stat_file, 524288)’ leaks here; was opened at (6) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘rmdirfd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: warning: leak of ‘fdopendir(fd)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: note: (1) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: note: (2) ‘fdopendir(fd)’ leaks here; was allocated at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_container_delete_status’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: warning: leak of file descriptor ‘open(get_run_directory(state_root), 589824)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling ‘get_run_directory’ from ‘libcrun_container_delete_status’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:67:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:69:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (14) returning to ‘libcrun_container_delete_status’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (15) following ‘false’ branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (17) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (18) ‘open(get_run_directory(state_root), 589824)’ leaks here; was opened at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_get_containers_list’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling ‘get_run_directory’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:45:9: note: (4) ‘root’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (5) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) ‘root’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (12) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:58:15: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (14) returning to ‘libcrun_get_containers_list’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (15) argument 1 (‘get_run_directory(state_root)’) NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:27: <--[gcc] /usr/include/dirent.h:141:13: note: argument 1 of ‘opendir’ must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: warning: leak of ‘opendir(get_run_directory(state_root))’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling ‘get_run_directory’ from ‘libcrun_get_containers_list’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:67:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:69:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (14) returning to ‘libcrun_get_containers_list’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (16) ‘opendir(get_run_directory(state_root))’ leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_status_create_exec_fifo’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: warning: leak of file descriptor ‘open(fifo_path, 526336)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:677:1: note: (1) entry to ‘libcrun_status_create_exec_fifo’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:679:34: note: (2) calling ‘libcrun_get_state_directory’ from ‘libcrun_status_create_exec_fifo’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:73:1: note: (3) entry to ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (4) calling ‘get_run_directory’ from ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (5) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (6) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (10) returning to ‘libcrun_get_state_directory’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:81:6: note: (11) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:83:7: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:679:34: note: (13) returning to ‘libcrun_status_create_exec_fifo’ from ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:684:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:687:9: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:688:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (19) ‘open(fifo_path, 526336)’ leaks here; was opened at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function ‘libcrun_status_write_exec_fifo’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: warning: leak of file descriptor ‘open(fifo_path, 524289)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:699:1: note: (1) entry to ‘libcrun_status_write_exec_fifo’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:701:34: note: (2) calling ‘libcrun_get_state_directory’ from ‘libcrun_status_write_exec_fifo’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:73:1: note: (3) entry to ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (4) calling ‘get_run_directory’ from ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (5) entry to ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (6) following ‘false’ branch (when ‘state_root’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (10) returning to ‘libcrun_get_state_directory’ from ‘get_run_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:81:6: note: (11) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:83:7: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:701:34: note: (13) returning to ‘libcrun_status_write_exec_fifo’ from ‘libcrun_get_state_directory’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:710:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (17) ‘open(fifo_path, 524289)’ leaks here; was opened at (16) <--[gcc] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-intelrdt.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-intelrdt.Tpo -c -o src/libcrun/libcrun_testing_a-intelrdt.o `test -f 'src/libcrun/intelrdt.c' || echo './'`src/libcrun/intelrdt.c mv -f src/libcrun/.deps/libcrun_testing_a-intelrdt.Tpo src/libcrun/.deps/libcrun_testing_a-intelrdt.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-seccomp.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-seccomp.Tpo -c -o src/libcrun/libcrun_testing_a-seccomp.o `test -f 'src/libcrun/seccomp.c' || echo './'`src/libcrun/seccomp.c mv -f src/libcrun/.deps/libcrun_testing_a-seccomp.Tpo src/libcrun/.deps/libcrun_testing_a-seccomp.Po /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘resctl_update’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘intelrdt_clean_l3_cache_schema(l3_cache_schema)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:295:1: note: (1) entry to ‘resctl_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (6) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (8) when ‘strstr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:23: note: (9) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (11) calling ‘intelrdt_clean_l3_cache_schema’ from ‘resctl_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:210:1: note: (12) entry to ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (13) calling ‘xmalloc’ from ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (14) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (19) returning to ‘intelrdt_clean_l3_cache_schema’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (20) returning to ‘resctl_update’ from ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (21) ‘intelrdt_clean_l3_cache_schema(l3_cache_schema)’ leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘resctl_create’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘intelrdt_clean_l3_cache_schema(l3_cache_schema)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when ‘strstr’ returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (15) calling ‘intelrdt_clean_l3_cache_schema’ from ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:210:1: note: (16) entry to ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (17) calling ‘xmalloc’ from ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (18) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (20) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (23) returning to ‘intelrdt_clean_l3_cache_schema’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (24) returning to ‘resctl_create’ from ‘intelrdt_clean_l3_cache_schema’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (25) ‘intelrdt_clean_l3_cache_schema(l3_cache_schema)’ leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘compare_rdt_configurations’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc((n_parts_a + 1) * 8)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when ‘strstr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling ‘validate_rdt_configuration’ from ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following ‘true’ branch (when ‘it’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling ‘compare_rdt_configurations’ from ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following ‘false’ branch (when ‘n_parts_a == n_parts_b’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling ‘xmalloc’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (42) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (43) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (45) returning to ‘compare_rdt_configurations’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (46) ‘xmalloc((n_parts_a + 1) * 8)’ leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:295:1: note: (1) entry to ‘resctl_update’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (6) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (8) when ‘strstr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:23: note: (9) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:314:6: note: (12) assuming ‘fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:314:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:317:9: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:299:21: note: (15) inlined call to ‘cleanup_closep’ from ‘resctl_update’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘resctl_update’ at src/libcrun/intelrdt.c:299:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (16) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:299:21: note: (18) inlined call to ‘cleanup_closep’ from ‘resctl_update’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘resctl_update’ at src/libcrun/intelrdt.c:299:21: cc1: note: (19) calling ‘cleanup_closep.part.0’ from ‘resctl_update’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (20) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (21) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (22) following ‘true’ branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (24) second ‘close’ here; first ‘close’ was at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘compare_rdt_configurations’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(<unknown>)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when ‘strstr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling ‘validate_rdt_configuration’ from ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following ‘true’ branch (when ‘it’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling ‘compare_rdt_configurations’ from ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following ‘false’ branch (when ‘n_parts_a == n_parts_b’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling ‘xmalloc’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (43) returning to ‘compare_rdt_configurations’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (44) calling ‘xstrdup’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (48) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (49) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (50) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (51) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (52) returning to ‘compare_rdt_configurations’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (53) ‘xstrdup(<unknown>)’ leaks here; was allocated at (48) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(<unknown>)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following ‘true’ branch (when ‘l3_cache_schema’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when ‘strstr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling ‘validate_rdt_configuration’ from ‘resctl_create’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following ‘true’ branch (when ‘it’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling ‘compare_rdt_configurations’ from ‘validate_rdt_configuration’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when ‘strchr’ returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following ‘false’ branch (when ‘it’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following ‘false’ branch (when ‘n_parts_a == n_parts_b’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling ‘xmalloc’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (43) returning to ‘compare_rdt_configurations’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (44) calling ‘xstrdup’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (48) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (49) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (50) returning to ‘compare_rdt_configurations’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:18: note: (51) calling ‘xstrdup’ from ‘compare_rdt_configurations’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (52) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (53) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (55) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (56) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (57) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (58) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:18: note: (59) returning to ‘compare_rdt_configurations’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) ‘xstrdup(<unknown>)’ leaks here; was allocated at (55) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c: In function ‘resctl_update’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: warning: leak of file descriptor ‘open(path, 524289)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) following ‘false’ branch (when ‘l3_cache_schema’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (8) ‘open(path, 524289)’ leaks here; was opened at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:9: warning: Although the value stored to 'a_copy' is used in the enclosing expression, the value is never actually read from 'a_copy' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:130:16: warning: Potential leak of memory pointed to by 'kv' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:130:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:9: warning: Although the value stored to 'b_copy' is used in the enclosing expression, the value is never actually read from 'b_copy' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:154:10: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:23: warning: Although the value stored to 'cleaned_l3_cache_schema' is used in the enclosing expression, the value is never actually read from 'cleaned_l3_cache_schema' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:23: warning: Although the value stored to 'cleaned_l3_cache_schema' is used in the enclosing expression, the value is never actually read from 'cleaned_l3_cache_schema' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:315:12: warning: Potential leak of memory pointed to by 'l3_cache_schema' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:25: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘libcrun_copy_seccomp’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(in_size + 1)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:836:1: note: (1) entry to ‘libcrun_copy_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:845:14: note: (2) calling ‘xmalloc’ from ‘libcrun_copy_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:845:14: note: (8) returning to ‘libcrun_copy_seccomp’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (9) ‘xmalloc(in_size + 1)’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘evict_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of ‘xrealloc(entries, (n_entries + 1) * 88)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:492:1: note: (1) entry to ‘evict_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (4) following ‘false’ branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:529:14: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:531:25: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (12) calling ‘xrealloc’ from ‘evict_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (15) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (18) returning to ‘evict_cache’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (19) ‘xrealloc(entries, (n_entries + 1) * 88)’ leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘evict_cache’ at src/libcrun/seccomp.c:516:40: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-‘free’ of ‘entries’ [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘evict_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:492:1: note: (1) entry to ‘evict_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (4) following ‘false’ branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (6) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:529:14: note: (10) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:531:25: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (12) passing freed pointer ‘entries’ in call to ‘xrealloc’ from ‘evict_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (17) returning to ‘evict_cache’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:517:24: note: (18) inlined call to ‘cleanup_dirp’ from ‘evict_cache’ <--[gcc] In function ‘cleanup_dirp’, inlined from ‘evict_cache’ at src/libcrun/seccomp.c:517:24: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (19) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:198:5: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘evict_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:516:40: note: (21) inlined call to ‘cleanup_freep’ from ‘evict_cache’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘evict_cache’ at src/libcrun/seccomp.c:516:40: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (22) second ‘free’ here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:859:1: note: (1) entry to ‘libcrun_open_seccomp_bpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:868:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (4) calling ‘open_rundir_dirfd’ from ‘libcrun_open_seccomp_bpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (5) entry to ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (6) following ‘false’ branch... <--[gcc] cc1: note: (7) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (9) assuming ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (11) inlined call to ‘cleanup_freep’ from ‘open_rundir_dirfd’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘open_rundir_dirfd’ at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (13) returning to ‘libcrun_open_seccomp_bpf’ from ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:872:6: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:876:49: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:861:21: note: (16) inlined call to ‘cleanup_closep’ from ‘libcrun_open_seccomp_bpf’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_open_seccomp_bpf’ at src/libcrun/seccomp.c:861:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (17) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:861:21: note: (19) inlined call to ‘cleanup_closep’ from ‘libcrun_open_seccomp_bpf’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_open_seccomp_bpf’ at src/libcrun/seccomp.c:861:21: cc1: note: (20) calling ‘cleanup_closep.part.0’ from ‘libcrun_open_seccomp_bpf’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (21) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (22) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (23) following ‘true’ branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (25) second ‘close’ here; first ‘close’ was at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘memfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to ‘libcrun_apply_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following ‘false’ branch (when ‘infd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following ‘true’ branch (when ‘listener_receiver_fd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (10) following ‘true’ branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:269:38: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (12) inlined call to ‘cleanup_closep’ from ‘libcrun_apply_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_apply_seccomp’ at src/libcrun/seccomp.c:250:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (13) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (15) inlined call to ‘cleanup_closep’ from ‘libcrun_apply_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_apply_seccomp’ at src/libcrun/seccomp.c:250:25: cc1: note: (16) calling ‘cleanup_closep.part.0’ from ‘libcrun_apply_seccomp’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (17) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (18) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (19) following ‘true’ branch... <--[gcc] cc1: note: (20) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (21) second ‘close’ here; first ‘close’ was at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘<unknown>’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to ‘libcrun_apply_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following ‘false’ branch (when ‘infd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following ‘true’ branch (when ‘listener_receiver_fd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:261:10: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:267:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:271:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:273:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (16) calling ‘close_and_reset’ from ‘libcrun_apply_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (17) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (18) following ‘true’ branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (20) returning to ‘libcrun_apply_seccomp’ from ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:284:10: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:290:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:290:10: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (24) inlined call to ‘cleanup_closep’ from ‘libcrun_apply_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_apply_seccomp’ at src/libcrun/seccomp.c:250:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (26) following ‘false’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:325:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:334:6: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:334:6: note: (30) following ‘true’ branch (when ‘listener_receiver_fd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:336:43: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:206:21: note: (32) inlined call to ‘cleanup_closep’ from ‘libcrun_apply_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_apply_seccomp’ at src/libcrun/seccomp.c:206:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (33) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:206:21: note: (35) inlined call to ‘cleanup_closep’ from ‘libcrun_apply_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘libcrun_apply_seccomp’ at src/libcrun/seccomp.c:206:21: cc1: note: (36) calling ‘cleanup_closep.part.0’ from ‘libcrun_apply_seccomp’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (37) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (38) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (39) following ‘true’ branch... <--[gcc] cc1: note: (40) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (41) second ‘close’ here; first ‘close’ was at (38) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘dirfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:572:1: note: (1) entry to ‘store_seccomp_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:580:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:583:7: note: (3) inlined call to ‘is_empty_string’ from ‘store_seccomp_cache’ <--[gcc] In function ‘is_empty_string’, inlined from ‘store_seccomp_cache’ at src/libcrun/seccomp.c:583:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:39: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (7) calling ‘open_rundir_dirfd’ from ‘store_seccomp_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (8) entry to ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (9) following ‘false’ branch... <--[gcc] cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (12) assuming ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (14) inlined call to ‘cleanup_freep’ from ‘open_rundir_dirfd’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘open_rundir_dirfd’ at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (16) returning to ‘store_seccomp_cache’ from ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:587:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:591:48: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:577:21: note: (19) inlined call to ‘cleanup_closep’ from ‘store_seccomp_cache’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘store_seccomp_cache’ at src/libcrun/seccomp.c:577:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (20) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:577:21: note: (22) inlined call to ‘cleanup_closep’ from ‘store_seccomp_cache’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘store_seccomp_cache’ at src/libcrun/seccomp.c:577:21: cc1: note: (23) calling ‘cleanup_closep.part.0’ from ‘store_seccomp_cache’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (24) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (25) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (26) following ‘true’ branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (28) second ‘close’ here; first ‘close’ was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘close_and_reset’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double ‘close’ of file descriptor ‘memfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to ‘libcrun_apply_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following ‘false’ branch (when ‘infd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following ‘true’ branch (when ‘listener_receiver_fd >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:261:10: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:267:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:271:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:273:10: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (16) calling ‘close_and_reset’ from ‘libcrun_apply_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (17) entry to ‘close_and_reset’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (18) following ‘true’ branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (20) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (21) following ‘true’ branch... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (23) second ‘close’ here; first ‘close’ was at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘libcrun_open_seccomp_bpf’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: warning: leak of file descriptor ‘open_rundir_dirfd(*container_50->context.state_root, err)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:859:1: note: (1) entry to ‘libcrun_open_seccomp_bpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:868:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (4) calling ‘open_rundir_dirfd’ from ‘libcrun_open_seccomp_bpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (5) entry to ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (6) following ‘false’ branch... <--[gcc] cc1: note: (7) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (9) assuming ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (11) inlined call to ‘cleanup_freep’ from ‘open_rundir_dirfd’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘open_rundir_dirfd’ at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘libcrun_open_seccomp_bpf’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (13) returning to ‘libcrun_open_seccomp_bpf’ from ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: note: (14) ‘open_rundir_dirfd(*container_50->context.state_root, err)’ leaks here; was opened at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘store_seccomp_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: warnmake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/tests_libcrun_errors-tests_libcrun_errors.o -MD -MP -MF tests/.deps/tests_libcrun_errors-tests_libcrun_errors.Tpo -c -o tests/tests_libcrun_errors-tests_libcrun_errors.o `test -f 'tests/tests_libcrun_errors.c' || echo './'`tests/tests_libcrun_errors.c mv -f tests/.deps/tests_libcrun_errors-tests_libcrun_errors.Tpo tests/.deps/tests_libcrun_errors-tests_libcrun_errors.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/tests_libcrun_intelrdt-tests_libcrun_intelrdt.o -MD -MP -MF tests/.deps/tests_libcrun_intelrdt-tests_libcrun_intelrdt.Tpo -c -o tests/tests_libcrun_intelrdt-tests_libcrun_intelrdt.o `test -f 'tests/tests_libcrun_intelrdt.c' || echo './'`tests/tests_libcrun_intelrdt.c mv -f tests/.deps/tests_libcrun_intelrdt-tests_libcrun_intelrdt.Tpo tests/.deps/tests_libcrun_intelrdt-tests_libcrun_intelrdt.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/tests_libcrun_fuzzer-tests_libcrun_fuzzer.o -MD -MP -MF tests/.deps/tests_libcrun_fuzzer-tests_libcrun_fuzzer.Tpo -c -o tests/tests_libcrun_fuzzer-tests_libcrun_fuzzer.o `test -f 'tests/tests_libcrun_fuzzer.c' || echo './'`tests/tests_libcrun_fuzzer.c mv -f tests/.deps/tests_libcrun_fuzzer-tests_libcrun_fuzzer.Tpo tests/.deps/tests_libcrun_fuzzer-tests_libcrun_fuzzer.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-crun.o -MD -MP -MF src/.deps/crun-crun.Tpo -c -o src/crun-crun.o `test -f 'src/crun.c' || echo './'`src/crun.c mv -f src/.deps/crun-crun.Tpo src/.deps/crun-crun.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-run.o -MD -MP -MF src/.deps/crun-run.Tpo -c -o src/crun-run.o `test -f 'src/run.c' || echo './'`src/run.c mv -f src/.deps/crun-run.Tpo src/.deps/crun-run.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-kill.o -MD -MP -MF src/.deps/crun-kill.Tpo -c -o src/crun-kill.o `test -f 'src/kill.c' || echo './'`src/kill.c mv -f src/.deps/crun-kill.Tpo src/.deps/crun-kill.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-delete.o -MD -MP -MF src/.deps/crun-delete.Tpo -c -o src/crun-delete.o `test -f 'src/delete.c' || echo './'`src/delete.c mv -f src/.deps/crun-delete.Tpo src/.deps/crun-delete.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-pause.o -MD -MP -MF src/.deps/crun-pause.Tpo -c -o src/crun-pause.o `test -f 'src/pause.c' || echo './'`src/pause.c mv -f src/.deps/crun-pause.Tpo src/.deps/crun-pause.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-unpause.o -MD -MP -MF src/.deps/crun-unpause.Tpo -c -o src/crun-unpause.o `test -f 'src/unpause.c' || echo './'`src/unpause.c mv -f src/.deps/crun-unpause.Tpo src/.deps/crun-unpause.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-spec.o -MD -MP -MF src/.deps/crun-spec.Tpo -c -o src/crun-spec.o `test -f 'src/spec.c' || echo './'`src/spec.c mv -f src/.deps/crun-spec.Tpo src/.deps/crun-spec.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-start.o -MD -MP -MF src/.deps/crun-start.Tpo -c -o src/crun-start.o `test -f 'src/start.c' || echo './'`src/start.c mv -f src/.deps/crun-start.Tpo src/.deps/crun-start.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-state.o -MD -MP -MF src/.deps/crun-state.Tpo -c -o src/crun-state.o `test -f 'src/state.c' || echo './'`src/state.c mv -f src/.deps/crun-state.Tpo src/.deps/crun-state.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-update.o -MD -MP -MF src/.deps/crun-update.Tpo -c -o src/crun-update.o `test -f 'src/update.c' || echo './'`src/update.c mv -f src/.deps/crun-update.Tpo src/.deps/crun-update.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-create.o -MD -MP -MF src/.deps/crun-create.Tpo -c -o src/crun-create.o `test -f 'src/create.c' || echo './'`src/create.c mv -f src/.deps/crun-create.Tpo src/.deps/crun-create.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-ps.o -MD -MP -MF src/.deps/crun-ps.Tpo -c -o src/crun-ps.o `test -f 'src/ps.c' || echo './'`src/ps.c mv -f src/.deps/crun-ps.Tpo src/.deps/crun-ps.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-checkpoint.o -MD -MP -MF src/.deps/crun-checkpoint.Tpo -c -o src/crun-checkpoint.o `test -f 'src/checkpoint.c' || echo './'`src/checkpoint.c mv -f src/.deps/crun-checkpoint.Tpo src/.deps/crun-checkpoint.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-restore.o -MD -MP -MF src/.deps/crun-restore.Tpo -c -o src/crun-restore.o `test -f 'src/restore.c' || echo './'`src/restore.c mv -f src/.deps/crun-restore.Tpo src/.deps/crun-restore.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-list.o -MD -MP -MF src/.deps/crun-list.Tpo -c -o src/crun-list.o `test -f 'src/list.c' || echo './'`src/list.c mv -f src/.deps/crun-list.Tpo src/.deps/crun-list.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-oci_features.o -MD -MP -MF src/.deps/crun-oci_features.Tpo -c -o src/crun-oci_features.o `test -f 'src/oci_features.c' || echo './'`src/oci_features.c mv -f src/.deps/crun-oci_features.Tpo src/.deps/crun-oci_features.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-cgroupfs.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-cgroupfs.Tpo -c -o src/libcrun/libcrun_la-cgroup-cgroupfs.lo `test -f 'src/libcrun/cgroup-cgroupfs.c' || echo './'`src/libcrun/cgroup-cgroupfs.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-cgroupfs.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-cgroupfs.Tpo -c src/libcrun/cgroup-cgroupfs.c -o src/libcrun/libcrun_la-cgroup-cgroupfs.o mv -f src/libcrun/.deps/libcrun_la-cgroup-cgroupfs.Tpo src/libcrun/.deps/libcrun_la-cgroup-cgroupfs.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/crun-cloned_binary.o -MD -MP -MF src/libcrun/.deps/crun-cloned_binary.Tpo -c -o src/libcrun/crun-cloned_binary.o `test -f 'src/libcrun/cloned_binary.c' || echo './'`src/libcrun/cloned_binary.c mv -f src/libcrun/.deps/crun-cloned_binary.Tpo src/libcrun/.deps/crun-cloned_binary.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/crun-exec.o -MD -MP -MF src/.deps/crun-exec.Tpo -c -o src/crun-exec.o `test -f 'src/exec.c' || echo './'`src/exec.c mv -f src/.deps/crun-exec.Tpo src/.deps/crun-exec.Po ing: leak of file descriptor ‘open_rundir_dirfd(*container_44->context.state_root, err)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:572:1: note: (1) entry to ‘store_seccomp_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:580:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:583:7: note: (3) inlined call to ‘is_empty_string’ from ‘store_seccomp_cache’ <--[gcc] In function ‘is_empty_string’, inlined from ‘store_seccomp_cache’ at src/libcrun/seccomp.c:583:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘store_seccomp_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:39: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (7) calling ‘open_rundir_dirfd’ from ‘store_seccomp_cache’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (8) entry to ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (9) following ‘false’ branch... <--[gcc] cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (12) assuming ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (14) inlined call to ‘cleanup_freep’ from ‘open_rundir_dirfd’ <--[gcc] In function ‘cleanup_freep’, inlined from ‘open_rundir_dirfd’ at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘store_seccomp_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (16) returning to ‘store_seccomp_cache’ from ‘open_rundir_dirfd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: note: (17) ‘open_rundir_dirfd(*container_44->context.state_root, err)’ leaks here; was opened at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘open_rundir_dirfd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: warning: leak of file descriptor ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (1) following ‘false’ branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (4) ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: warning: leak of file descriptor ‘<unknown>’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (1) following ‘false’ branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (4) assuming ‘open(libcrun_get_state_directory(state_root, 0), 2686976)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (5) ‘<unknown>’ leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function ‘evict_cache’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: warning: leak of ‘fdopendir(cache_dir_fd)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (3) following ‘false’ branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (5) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (8) ‘fdopendir(cache_dir_fd)’ leaks here; was allocated at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: warning: use of NULL ‘entries’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (3) following ‘false’ branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (5) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (7) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: note: (9) argument 1 (‘entries’) NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:22: <--[gcc] /usr/include/stdlib.h:970:13: note: argument 1 of ‘qsort’ must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:7: warning: Value stored to 'cache_dir_fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_errors.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_intelrdt.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:127:10: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:141:3: warning: Potential leak of memory pointed to by 'name' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:157:13: warning: Potential leak of memory pointed to by 'conf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:188:3: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:215:10: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:243:10: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:331:13: warning: Potential leak of memory pointed to by 'conf' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘outfd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:459:1: note: (1) entry to ‘LLVMFuzzerTestOneInput’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:461:3: note: (2) calling ‘run_one_test’ from ‘LLVMFuzzerTestOneInput’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:366:1: note: (3) entry to ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:370:3: note: (4) following ‘case 2:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:382:5: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:384:7: note: (6) calling ‘generate_seccomp’ from ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:145:1: note: (7) entry to ‘generate_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:153:10: note: (8) calling ‘make_nul_terminated’ from ‘generate_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:46:1: note: (9) entry to ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:51:6: note: (10) following ‘false’ branch (when ‘r’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:53:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:153:10: note: (12) returning to ‘generate_seccomp’ from ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:154:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:157:15: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:158:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: note: (17) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:165:6: note: (18) assuming ‘outfd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:165:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:168:3: note: (20) inlined call to ‘libcrun_seccomp_gen_ctx_init’ from ‘generate_seccomp’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:27: <--[gcc] In function ‘libcrun_seccomp_gen_ctx_init’, inlined from ‘generate_seccomp’ at tests/tests_libcrun_fuzzer.c:168:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:150:21: note: (22) inlined call to ‘cleanup_closep’ from ‘generate_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘generate_seccomp’ at tests/tests_libcrun_fuzzer.c:150:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (23) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:150:21: note: (25) inlined call to ‘cleanup_closep’ from ‘generate_seccomp’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘generate_seccomp’ at tests/tests_libcrun_fuzzer.c:150:21: cc1: note: (26) calling ‘cleanup_closep.part.0’ from ‘generate_seccomp’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (27) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (28) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (29) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (31) second ‘close’ here; first ‘close’ was at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:476:1: note: (1) entry to ‘main’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:482:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:484:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:486:6: note: (4) following ‘true’ branch (when ‘argc > 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:488:23: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:492:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:497:14: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:497:14: note: (8) inlined call to ‘LLVMFuzzerTestOneInput’ from ‘main’ <--[gcc] In function ‘LLVMFuzzerTestOneInput’, inlined from ‘main’ at tests/tests_libcrun_fuzzer.c:497:14: /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:461:3: note: (9) calling ‘run_one_test’ from ‘main’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:366:1: note: (10) entry to ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:370:3: note: (11) following ‘case 5:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:401:5: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:403:7: note: (13) calling ‘test_generate_ebpf’ from ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:60:1: note: (14) entry to ‘test_generate_ebpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:69:10: note: (15) calling ‘make_nul_terminated’ from ‘test_generate_ebpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:46:1: note: (16) entry to ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:51:6: note: (17) following ‘false’ branch (when ‘r’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:53:3: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:69:10: note: (19) returning to ‘test_generate_ebpf’ from ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:70:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:73:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:79:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:83:6: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:83:6: note: (24) following ‘false’ branch (when ‘len > 9’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:86:3: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:90:6: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:97:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:98:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: note: (30) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:106:6: note: (31) assuming ‘fd’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:106:6: note: (32) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:109:3: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:66:21: note: (34) inlined call to ‘cleanup_closep’ from ‘test_generate_ebpf’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_generate_ebpf’ at tests/tests_libcrun_fuzzer.c:66:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (35) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:66:21: note: (37) inlined call to ‘cleanup_closep’ from ‘test_generate_ebpf’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_generate_ebpf’ at tests/tests_libcrun_fuzzer.c:66:21: cc1: note: (38) calling ‘cleanup_closep.part.0’ from ‘test_generate_ebpf’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (39) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (40) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (41) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (43) second ‘close’ here; first ‘close’ was at (40) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c: In function ‘test_generate_ebpf’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: warning: leak of file descriptor ‘open("/dev/null", 1)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:476:1: note: (1) entry to ‘main’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:482:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:484:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:486:6: note: (4) following ‘true’ branch (when ‘argc > 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:488:23: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:492:10: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:497:14: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:497:14: note: (8) inlined call to ‘LLVMFuzzerTestOneInput’ from ‘main’ <--[gcc] In function ‘LLVMFuzzerTestOneInput’, inlined from ‘main’ at tests/tests_libcrun_fuzzer.c:497:14: /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:461:3: note: (9) calling ‘run_one_test’ from ‘main’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c: In function ‘test_generate_ebpf’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:366:1: note: (10) entry to ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:370:3: note: (11) following ‘case 5:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:401:5: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:403:7: note: (13) calling ‘test_generate_ebpf’ from ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:60:1: note: (14) entry to ‘test_generate_ebpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:69:10: note: (15) calling ‘make_nul_terminated’ from ‘test_generate_ebpf’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:46:1: note: (16) entry to ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:51:6: note: (17) following ‘false’ branch (when ‘r’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:53:3: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:69:10: note: (19) returning to ‘test_generate_ebpf’ from ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:70:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:73:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:79:6: note: (22) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:83:6: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:83:6: note: (24) following ‘false’ branch (when ‘len > 9’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:86:3: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:90:6: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:97:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:98:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: note: (30) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:105:8: note: (31) ‘open("/dev/null", 1)’ leaks here; was opened at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c: In function ‘generate_seccomp’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: warning: leak of file descriptor ‘open("/dev/null", 1)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:459:1: note: (1) entry to ‘LLVMFuzzerTestOneInput’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:461:3: note: (2) calling ‘run_one_test’ from ‘LLVMFuzzerTestOneInput’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:366:1: note: (3) entry to ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:370:3: note: (4) following ‘case 2:’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:382:5: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:384:7: note: (6) calling ‘generate_seccomp’ from ‘run_one_test’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:145:1: note: (7) entry to ‘generate_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:153:10: note: (8) calling ‘make_nul_terminated’ from ‘generate_seccomp’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:46:1: note: (9) entry to ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:51:6: note: (10) following ‘false’ branch (when ‘r’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:53:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:153:10: note: (12) returning to ‘generate_seccomp’ from ‘make_nul_terminated’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:154:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:157:15: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:158:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: note: (17) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_fuzzer.c:164:11: note: (18) ‘open("/dev/null", 1)’ leaks here; was opened at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/crun.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/crun.c:76:15: warning: Potential leak of memory pointed to by 'handlers_path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/run.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/run.c:156:14: warning: Although the value stored to 'bundle_cleanup' is used in the enclosing expression, the value is never actually read from 'bundle_cleanup' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/run.c:182:33: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/kill.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/delete.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/pause.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/unpause.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c: In function ‘crun_command_spec’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: warning: leak of FILE ‘fopen(<unknown>, "w+e")’ [CWE-775] [-Wanalyzer-file-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:99:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:103:14: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:103:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:117:17: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: note: (5) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: note: (6) ‘fopen(<unknown>, "w+e")’ leaks here; was opened at (5) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: warning: leak of ‘fopen(<unknown>, "w+e")’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:99:6: note: (1) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:103:14: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:103:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:117:17: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: note: (5) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/spec.c:126:7: note: (6) ‘fopen(<unknown>, "w+e")’ leaks here; was allocated at (5) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/start.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/state.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/update.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/create.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/create.c:142:14: warning: Although the value stored to 'bundle_cleanup' is used in the enclosing expression, the value is never actually read from 'bundle_cleanup' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/create.c:168:33: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/ps.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/checkpoint.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/restore.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/list.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/oci_features.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/oci_features.c:73:9: warning: Value stored to 'val' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c: In function 'libcrun_precreate_cgroup_cgroupfs': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: warning: leak of file descriptor 'open(cgroup_path, 720896)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:68:6: note: (1) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:71:9: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:72:6: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:78:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:79:6: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-cgroupfs.c:82:12: note: (8) 'open(cgroup_path, 720896)' leaks here; was opened at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:43: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following ‘true’ branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function ‘fetchve’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: warning: leak of ‘read_file("/proc/self/cmdline", &cmdline_size)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) calling ‘fetchve’ from ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (5) entry to ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (6) calling ‘read_file’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (7) entry to ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (8) following ‘false’ branch (when ‘length’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (16) calling ‘xrealloc’ from ‘read_file’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:61: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (17) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to ‘read_file’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to ‘fetchve’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling ‘parse_xargs’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following ‘false’ branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (34) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (36) calling ‘xrealloc’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (37) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (38) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (41) returning to ‘parse_xargs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (42) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (44) calling ‘xrealloc’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (45) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (46) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (47) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (49) returning to ‘parse_xargs’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (50) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (52) returning to ‘fetchve’ from ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (53) ‘read_file("/proc/self/cmdline", &cmdline_size)’ leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function ‘parse_xargs’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:523:16: note: (2) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (5) calling ‘fetchve’ from ‘ensure_cloned_binary’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (6) entry to ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (7) calling ‘read_file’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (8) entry to ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (9) following ‘false’ branch (when ‘length’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (17) calling ‘xrealloc’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (18) entry to ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when ‘realloc’ succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to ‘read_file’ from ‘xrealloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to ‘fetchve’ from ‘read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling ‘parse_xargs’ from ‘fetchve’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to ‘parse_xargs’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (34) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:19: note: (35) following ‘false’ branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (39) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:18: note: (40) ‘argv’ is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: note: (41) dereference of NULL ‘*output + (long unsigned int)num * 8’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:17: warning: Array access results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:535:11: warning: Potential leak of memory pointed to by 'argv' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:29: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘crun_command_exec’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(88)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘true’ branch (when ‘userspec’ is NULL)... <--[gcc] In file included from /usr/include/bits/types/stack_t.h:23, <--[gcc] from /usr/include/signal.h:313, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:29: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:208:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (26) returning to ‘crun_command_exec’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:297:10: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:300:23: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:300:10: note: (29) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:303:23: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:303:10: note: (31) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:306:17: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:306:17: note: (33) calling ‘xmalloc’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (34) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (35) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (36) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:306:17: note: (39) returning to ‘crun_command_exec’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (40) ‘xmalloc(88)’ leaks here; was allocated at (35) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0((long unsigned int)(argc + 1) * 8)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/buimake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_la-blake3.lo -MD -MP -MF src/libcrun/blake3/.deps/libcrun_la-blake3.Tpo -c -o src/libcrun/blake3/libcrun_la-blake3.lo `test -f 'src/libcrun/blake3/blake3.c' || echo './'`src/libcrun/blake3/blake3.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_la-blake3.lo -MD -MP -MF src/libcrun/blake3/.deps/libcrun_la-blake3.Tpo -c src/libcrun/blake3/blake3.c -o src/libcrun/blake3/libcrun_la-blake3.o mv -f src/libcrun/blake3/.deps/libcrun_la-blake3.Tpo src/libcrun/blake3/.deps/libcrun_la-blake3.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_la-blake3_portable.lo -MD -MP -MF src/libcrun/blake3/.deps/libcrun_la-blake3_portable.Tpo -c -o src/libcrun/blake3/libcrun_la-blake3_portable.lo `test -f 'src/libcrun/blake3/blake3_portable.c' || echo './'`src/libcrun/blake3/blake3_portable.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/blake3/libcrun_la-blake3_portable.lo -MD -MP -MF src/libcrun/blake3/.deps/libcrun_la-blake3_portable.Tpo -c src/libcrun/blake3/blake3_portable.c -o src/libcrun/blake3/libcrun_la-blake3_portable.o mv -f src/libcrun/blake3/.deps/libcrun_la-blake3_portable.Tpo src/libcrun/blake3/.deps/libcrun_la-blake3_portable.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-setup.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-setup.Tpo -c -o src/libcrun/libcrun_la-cgroup-setup.lo `test -f 'src/libcrun/cgroup-setup.c' || echo './'`src/libcrun/cgroup-setup.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-setup.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-setup.Tpo -c src/libcrun/cgroup-setup.c -o src/libcrun/libcrun_la-cgroup-setup.o mv -f src/libcrun/.deps/libcrun_la-cgroup-setup.Tpo src/libcrun/.deps/libcrun_la-cgroup-setup.Plo ld/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (19) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (20) ‘xmalloc0((long unsigned int)(argc + 1) * 8)’ leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘make_oci_process_user’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(56)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘false’ branch (when ‘userspec’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (26) calling ‘xmalloc0’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (27) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (29) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (32) returning to ‘make_oci_process_user’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (33) ‘xmalloc0(56)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(56)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘false’ branch (when ‘userspec’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (26) calling ‘xmalloc0’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (27) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (29) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (32) returning to ‘make_oci_process_user’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:213:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:6: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:217:6: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (37) ‘xmalloc0(56)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(56)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘false’ branch (when ‘userspec’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (26) calling ‘xmalloc0’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (27) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (29) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (32) returning to ‘make_oci_process_user’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:213:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:6: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:217:6: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:217:6: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:220:9: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (39) ‘xmalloc0(56)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘crun_command_exec’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘make_oci_process_user(exec_options.user)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (6) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (7) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (10) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (11) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (12) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (13) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (15) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (16) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (20) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (21) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (22) following ‘false’ branch (when ‘userspec’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (24) calling ‘xmalloc0’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (25) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (26) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (27) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (28) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (30) returning to ‘make_oci_process_user’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:213:6: note: (31) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:7: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:6: note: (33) following ‘true’ branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (35) returning to ‘crun_command_exec’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (36) ‘make_oci_process_user(exec_options.user)’ leaks here; was allocated at (26) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘make_oci_process_user’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of ‘xmalloc0(56)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘false’ branch (when ‘userspec’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (26) calling ‘xmalloc0’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (27) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (29) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (30) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:210:7: note: (32) returning to ‘make_oci_process_user’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:213:6: note: (33) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:215:6: note: (35) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:217:6: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:217:6: note: (37) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:220:9: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:222:6: note: (39) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:224:7: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (41) ‘xmalloc0(56)’ leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘crun_command_exec’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(*<unknown>)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:288:52: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:288:28: note: (20) calling ‘xstrdup’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (21) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (22) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (24) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (25) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (26) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:288:28: note: (28) returning to ‘crun_command_exec’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) ‘xstrdup(*<unknown>)’ leaks here; was allocated at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(exec_options.process_label)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘true’ branch (when ‘userspec’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:208:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (26) returning to ‘crun_command_exec’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:297:10: note: (27) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:298:34: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:298:34: note: (29) calling ‘xstrdup’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (30) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (31) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (33) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (34) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (35) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:298:34: note: (37) returning to ‘crun_command_exec’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (38) ‘xstrdup(exec_options.process_label)’ leaks here; was allocated at (33) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of ‘xstrdup(exec_options.apparmor)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:245:1: note: (1) entry to ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:264:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:267:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:272:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:19: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:278:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (8) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:282:17: note: (12) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (13) calling ‘xmalloc0’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (14) entry to ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:286:23: note: (17) returning to ‘crun_command_exec’ from ‘xmalloc0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:287:21: note: (18) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:289:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:290:10: note: (20) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:292:39: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (22) calling ‘make_oci_process_user’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:202:1: note: (23) entry to ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:207:6: note: (24) following ‘true’ branch (when ‘userspec’ is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:208:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:295:23: note: (26) returning to ‘crun_command_exec’ from ‘make_oci_process_user’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:297:10: note: (27) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:300:23: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:300:10: note: (29) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:301:37: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:301:37: note: (31) calling ‘xstrdup’ from ‘crun_command_exec’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (32) entry to ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (33) following ‘false’ branch (when ‘str’ is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (35) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (36) assuming ‘ret’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (37) following ‘false’ branch (when ‘ret’ is non-NULL)... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:301:37: note: (39) returning to ‘crun_command_exec’ from ‘xstrdup’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (40) ‘xstrdup(exec_options.apparmor)’ leaks here; was allocated at (35) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/exec.c:274:33: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:186: warning: uninitvar(CWE-457): Uninitialized variable: chunks_array <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:229: warning: uninitvar(CWE-457): Uninitialized variable: parents_array <--[cppcheck] In function 'compress_chunks_parallel', inlined from 'blake3_compress_subtree_wide' at src/libcrun/blake3/blake3.c:274:12: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:186:3: warning: 'chunks_array' may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 186 | blake3_hash_many(chunks_array, chunks_array_len, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 187 | BLAKE3_CHUNK_LEN / BLAKE3_BLOCK_LEN, key, chunk_counter, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 188 | true, flags, CHUNK_START, CHUNK_END, out); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:6: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3_impl.h: In function 'blake3_compress_subtree_wide': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3_impl.h:17:35: note: by argument 1 of type 'const uint8_t * const *' to 'blake3_hash_many' declared here <--[gcc] 17 | #define blake3_hash_many_portable blake3_hash_many | ^~~~~~~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:177:18: note: 'chunks_array' declared here <--[gcc] 177 | const uint8_t *chunks_array[MAX_SIMD_DEGREE]; | ^~~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:138:3: warning: Value stored to 'input' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/blake3/blake3.c:139:3: warning: Value stored to 'input_len' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'read_unified_cgroup_pid': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(from)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following 'true' branch (when 'cgroup_mode == 1')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (4) calling 'enter_cgroup_v2' from 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:397:1: note: (5) entry to 'enter_cgroup_v2' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:408:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:411:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:419:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:422:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:423:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:426:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:439:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:442:3: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:454:10: note: (14) following 'true' branch (when 'init_pid > 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (16) calling 'read_unified_cgroup_pid' from 'enter_cgroup_v2' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:294:1: note: (17) entry to 'read_unified_cgroup_pid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:304:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (20) when 'strstr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:308:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:311:8: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:313:8: note: (23) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:314:6: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:316:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:318:11: note: (26) calling 'xstrdup' from 'read_unified_cgroup_pid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (27) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (28) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (30) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (31) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:318:11: note: (34) returning to 'read_unified_cgroup_pid' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (35) 'xstrdup(from)' leaks here; was allocated at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function 'initialize_cpuset_subsystem_rec': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: warning: leak of file descriptor 'open(path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following 'false' branch (when 'cgroup_mode != 1')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (4) calling 'enter_cgroup_v1' from 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:323:1: note: (5) entry to 'enter_cgroup_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:338:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:341:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:342:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:352:19: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:353:8: note: (10) following 'true' branch (when 'has_data != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:359:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:371:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (16) calling 'enter_cgroup_subsystem' from 'enter_cgroup_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:197:1: note: (17) entry to 'enter_cgroup_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:204:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (20) following 'true' branch (when 'create_if_missing != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:209:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:210:10: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:10: note: (24) following 'true' branch (when the strings are equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (26) calling 'initialize_cpuset_subsystem' from 'enter_cgroup_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:148:1: note: (27) entry to 'initialize_cpuset_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (28) calling 'xstrdup' from 'initialize_cpuset_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (29) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (30) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (34) returning to 'initialize_cpuset_subsystem' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: note: (35) calling 'initialize_cpuset_subsystem_rec' from 'initialize_cpuset_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:43:1: note: (36) entry to 'initialize_cpuset_subsystem_rec' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: note: (37) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:53:11: note: (38) 'open(path, 589824)' leaks here; was opened at (37) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function 'initialize_cpuset_subsystem': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following 'false' branch (when 'cgroup_mode != 1')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:505:13: note: (4) calling 'enter_cgroup_v1' from 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:323:1: note: (5) entry to 'enter_cgroup_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:325:22: note: (6) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:338:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:341:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:342:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:352:19: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:353:8: note: (11) following 'true' branch (when 'has_data != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:359:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:371:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:373:10: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:377:13: note: (17) calling 'enter_cgroup_subsystem' from 'enter_cgroup_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:197:1: note: (18) entry to 'enter_cgroup_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:200:22: note: (19) 'cgroup_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:204:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:207:6: note: (22) following 'true' branch (when 'create_if_missing != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:209:13: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:210:10: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:11: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:219:10: note: (26) following 'true' branch (when the strings are equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:221:17: note: (28) calling 'initialize_cpuset_subsystem' from 'enter_cgroup_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:148:1: note: (29) entry to 'initialize_cpuset_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (30) calling 'xstrdup' from 'initialize_cpuset_subsystem' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following 'true' branch (when 'str' is NULL)... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:150:33: note: (34) returning to 'initialize_cpuset_subsystem' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:155:10: note: (35) argument 1 ('xstrdup(path)') NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of '__builtin_strlen' must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c: In function 'enter_cgroup_v2': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: warning: use of NULL 'cgroup_crun_exec_path' where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:493:1: note: (1) entry to 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:497:6: note: (2) following 'true' branch (when 'cgroup_mode == 1')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:499:13: note: (4) calling 'enter_cgroup_v2' from 'enter_cgroup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:397:1: note: (5) entry to 'enter_cgroup_v2' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:399:22: note: (6) 'cgroup_path_procs' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:400:22: note: (7) 'cgroup_path_procs' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:408:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:411:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:419:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:422:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:423:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:426:17: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:439:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:442:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:450:26: note: (16) 'cgroup_crun_exec_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:451:26: note: (17) 'cgroup_crun_exec_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:454:10: note: (18) following 'true' branch (when 'init_pid > 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (20) calling 'read_unified_cgroup_pid' from 'enter_cgroup_v2' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:294:1: note: (21) entry to 'read_unified_cgroup_pid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:299:22: note: (22) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:307:10: note: (23) when 'strstr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:308:6: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:84:25: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:309:12: note: in expansion of macro 'crun_make_error' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:456:17: note: (26) returning to 'enter_cgroup_v2' from 'read_unified_cgroup_pid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:457:14: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (29) 'cgroup_crun_exec_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (30) 'cgroup_crun_exec_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:461:15: note: (31) argument 2 ('cgroup_crun_exec_path') NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:23: <--[gcc] /usr/include/string.h:159:12: note: argument 2 of 'strncmp' must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:123:16: warning: Although the value stored to 'allocated_cpus' is used in the enclosing expression, the value is never actually read from 'allocated_cpus' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-setup.c:125:16: warning: Although the value stored to 'allocated_mems' is used in the enclosing expression, the value is never actually read from 'allocated_mems' [deadcode.DeadStores] <--[clang] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-resources.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-resources.Tpo -c -o src/libcrun/libcrun_la-cgroup-resources.lo `test -f 'src/libcrun/cgroup-resources.c' || echo './'`src/libcrun/cgroup-resources.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-resources.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-resources.Tpo -c src/libcrun/cgroup-resources.c -o src/libcrun/libcrun_la-cgroup-resources.o mv -f src/libcrun/.deps/libcrun_la-cgroup-resources.Tpo src/libcrun/.deps/libcrun_la-cgroup-resources.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-systemd.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-systemd.Tpo -c -o src/libcrun/libcrun_la-cgroup-systemd.lo `test -f 'src/libcrun/cgroup-systemd.c' || echo './'`src/libcrun/cgroup-systemd.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-systemd.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-systemd.Tpo -c src/libcrun/cgroup-systemd.c -o src/libcrun/libcrun_la-cgroup-systemd.o mv -f src/libcrun/.deps/libcrun_la-cgroup-systemd.Tpo src/libcrun/.deps/libcrun_la-cgroup-systemd.Plo /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:134:11: warning: Potential leak of memory pointed to by 'key' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:984:20: warning: Potential leak of memory pointed to by 'period_str' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'cgroup_dirfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (15) assuming 'cgroup_dirfd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1253:21: note: (18) inlined call to 'cleanup_closep' from 'update_cgroup_v2_resources' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:23: <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v2_resources' at src/libcrun/cgroup-resources.c:1253:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (19) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (20) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1253:21: note: (21) inlined call to 'cleanup_closep' from 'update_cgroup_v2_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v2_resources' at src/libcrun/cgroup-resources.c:1253:21: cc1: note: (22) calling 'cleanup_closep.part.0' from 'update_cgroup_v2_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (23) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (24) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (25) following 'true' branch... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (27) second 'close' here; first 'close' was at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd_netprio' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (19) assuming 'dirfd_netprio' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (22) calling 'write_network_resources' from 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:409:1: note: (23) entry to 'write_network_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:415:6: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (26) returning to 'update_cgroup_v1_resources' from 'write_network_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1110:10: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (28) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1090:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (30) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (32) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1090:25: cc1: note: (33) calling 'cleanup_closep.part.0' from 'update_cgroup_v1_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (34) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (35) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (36) following 'true' branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (38) second 'close' here; first 'close' was at (35) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (20) calling 'write_network_resources' from 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:409:1: note: (21) entry to 'write_network_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:415:6: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:10: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:422:6: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:427:10: note: (26) following 'false' branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (28) inlined call to 'cleanup_closep' from 'write_network_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_network_resources' at src/libcrun/cgroup-resources.c:425:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (29) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:425:25: note: (31) inlined call to 'cleanup_closep' from 'write_network_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_network_resources' at src/libcrun/cgroup-resources.c:425:25: cc1: note: (32) calling 'cleanup_closep.part.0' from 'write_network_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (33) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (34) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (35) following 'true' branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (37) second 'close' here; first 'close' was at (34) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'wfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling 'write_blkio_resources' from 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to 'write_blkio_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:242:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:6: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:286:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:286:10: note: (26) following 'true' branch (when 'cgroup2 != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:292:14: note: (28) following 'false' branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (30) inlined call to 'cleanup_closep' from 'write_blkio_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_blkio_resources' at src/libcrun/cgroup-resources.c:288:29: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (31) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (32) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:288:29: note: (33) inlined call to 'cleanup_closep' from 'write_blkio_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_blkio_resources' at src/libcrun/cgroup-resources.c:288:29: cc1: note: (34) calling 'cleanup_closep.part.0' from 'write_blkio_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (35) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (36) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (37) following 'true' branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (39) second 'close' here; first 'close' was at (36) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd_netclass' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (17) assuming 'dirfd_netclass' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1106:10: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1109:13: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1110:10: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1090:25: note: (23) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1090:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1088:25: note: (27) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (28) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1088:25: note: (30) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1088:25: cc1: note: (31) calling 'cleanup_closep.part.0' from 'update_cgroup_v1_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (32) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (33) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (34) following 'true' branch... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (36) second 'close' here; first 'close' was at (33) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd_htlb' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1114:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1116:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1120:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1123:10: note: (15) assuming 'dirfd_htlb' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1123:10: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (18) calling 'write_hugetlb_resources' from 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:443:1: note: (19) entry to 'write_hugetlb_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:449:17: note: (20) following 'false' branch (when 'i >= htlb_len')... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1126:13: note: (22) returning to 'update_cgroup_v1_resources' from 'write_hugetlb_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1128:10: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1117:25: note: (24) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1117:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (26) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1117:25: note: (28) inlined call to 'cleanup_closep' from 'update_cgroup_v1_resources' <--[gcc] In function 'cleanup_closep', inlined from 'update_cgroup_v1_resources' at src/libcrun/cgroup-resources.c:1117:25: cc1: note: (29) calling 'cleanup_closep.part.0' from 'update_cgroup_v1_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (30) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (31) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (32) following 'true' branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (34) second 'close' here; first 'close' was at (31) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'wfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling 'write_blkio_resources' from 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to 'write_blkio_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:347:6: note: (22) following 'true' branch (when 'cgroup2 != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:353:10: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:359:13: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:361:10: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:364:13: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:366:10: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:369:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:371:10: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:374:13: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:376:10: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (33) inlined call to 'cleanup_closep' from 'write_blkio_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_blkio_resources' at src/libcrun/cgroup-resources.c:349:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (35) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (37) inlined call to 'cleanup_closep' from 'write_blkio_resources' <--[gcc] In function 'cleanup_closep', inlined from 'write_blkio_resources' at src/libcrun/cgroup-resources.c:349:25: cc1: note: (38) calling 'cleanup_closep.part.0' from 'write_blkio_resources' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (39) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (40) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (41) following 'true' branch... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (43) second 'close' here; first 'close' was at (40) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'check_cgroup_v2_controller_available_wrapper': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(name)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1296:6: note: (16) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1298:13: note: (18) calling 'write_blkio_resources' from 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:235:1: note: (19) entry to 'write_blkio_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:275:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:284:12: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:347:6: note: (22) following 'true' branch (when 'cgroup2 != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:349:25: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:353:10: note: (24) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:355:39: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:356:18: note: (26) calling 'check_cgroup_v2_controller_available_wrapper' from 'write_blkio_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:110:1: note: (27) entry to 'check_cgroup_v2_controller_available_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:112:6: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:115:3: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:118:6: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:120:26: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:129:13: note: (32) calling 'xstrdup' from 'check_cgroup_v2_controller_available_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (33) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (34) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (36) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (37) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (38) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:129:13: note: (40) returning to 'check_cgroup_v2_controller_available_wrapper' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (41) 'xstrdup(name)' leaks here; was allocated at (36) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:131:12: warning: use of NULL 'controllers' where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1252:22: note: (10) 'cgroup_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1264:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1267:16: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1303:6: note: (17) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1305:13: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1305:13: note: (19) calling 'write_hugetlb_resources' from 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:443:1: note: (20) entry to 'write_hugetlb_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:449:17: note: (21) following 'true' branch (when 'i < htlb_len')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:451:26: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:451:26: note: (23) 'filename' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:456:32: note: (24) following 'true' branch (when 'cgroup2 != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:458:50: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:461:13: note: (26) calling 'write_file_and_check_controllers_at' from 'write_hugetlb_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:167:1: note: (27) entry to 'write_file_and_check_controllers_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:172:9: note: (28) calling 'write_cgroup_file_or_alias' from 'write_file_and_check_controllers_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:48:1: note: (29) entry to 'write_cgroup_file_or_alias' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:53:6: note: (30) following 'false' branch... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:172:9: note: (32) returning to 'write_file_and_check_controllers_at' from 'write_cgroup_file_or_alias' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:173:6: note: (33) following 'true' branch (when 'cgroup2 != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:174:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:174:12: note: (35) calling 'check_cgroup_v2_controller_available_wrapper' from 'write_file_and_check_controllers_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:110:1: note: (36) entry to 'check_cgroup_v2_controller_available_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:120:26: note: (37) 'controllers' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:123:13: note: (38) 'controllers' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:131:12: note: (39) argument 1 ('xstrdup(name)') NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of '__builtin_strchr' must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c: In function 'update_cgroup_v1_resources': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: warning: leak of file descriptor 'open(path_to_blkio, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1066:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1068:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1073:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1076:21: note: (15) 'open(path_to_blkio, 589824)' leaks here; was opened at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: warning: leak of file descriptor 'open(path_to_netclass, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (17) 'open(path_to_netclass, 589824)' leaks here; was opened at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: warning: leak of file descriptor 'open(path_to_netprio, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1085:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1087:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1094:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1097:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1098:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1101:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1102:10: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1105:23: note: (19) 'open(path_to_netprio, 589824)' leaks here; was opened at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: warning: leak of file descriptor 'open(path_to_htlb, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 2 ... 3:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1360:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1362:14: note: (8) calling 'update_cgroup_v1_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1062:1: note: (9) entry to 'update_cgroup_v1_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1114:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1116:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1120:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1122:20: note: (15) 'open(path_to_htlb, 589824)' leaks here; was opened at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c: In function 'update_cgroup_v2_resources': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: warning: leak of file descriptor 'open(cgroup_path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1323:1: note: (1) entry to 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1330:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1333:6: note: (4) following 'false' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1355:3: note: (6) following 'case 1:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1357:5: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1358:14: note: (8) calling 'update_cgroup_v2_resources' from 'update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1250:1: note: (9) entry to 'update_cgroup_v2_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1256:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1259:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1260:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (14) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-resources.c:1263:18: note: (15) 'open(cgroup_path, 589824)' leaks here; was opened at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:93:28: warning: Array access (from variable 'mask') results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:108:10: warning: Potential leak of memory pointed to by 'mask' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:330:16: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:605:14: warning: Potential leak of memory pointed to by 'name' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:12: warning: Although the value stored to 'v_start' is used in the enclosing expression, the value is never actually read from 'v_start' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:616:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:14: warning: Although the value stored to 'v_start' is used in the enclosing expression, the value is never actually read from 'v_start' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:640:20: warning: Potential leak of memory pointed to by 'parts' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:655:16: warning: Potential leak of memory pointed to by 'part' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:891:11: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:895:11: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1108:3: warning: Value stored to 'sd_err' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:7: warning: Potential leak of memory pointed to by 'slice' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1351:3: warning: Potential leak of memory pointed to by 'path_to_scope' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'append_systemd_annotation': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(256)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling 'enter_systemd_cgroup_scope' from 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling 'open_sd_bus_connection' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to 'enter_systemd_cgroup_scope' from 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following 'false' branch (when 'slice' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following 'true' branch (when 'annotations' is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following 'false' branch (when 'len > 23')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling 'append_systemd_annotation' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=default -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_testing_a-linux.o -MD -MP -MF src/libcrun/.deps/libcrun_testing_a-linux.Tpo -c -o src/libcrun/libcrun_testing_a-linux.o `test -f 'src/libcrun/linux.c' || echo './'`src/libcrun/linux.c mv -f src/libcrun/.deps/libcrun_testing_a-linux.Tpo src/libcrun/.deps/libcrun_testing_a-linux.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-utils.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-utils.Tpo -c -o src/libcrun/libcrun_la-cgroup-utils.lo `test -f 'src/libcrun/cgroup-utils.c' || echo './'`src/libcrun/cgroup-utils.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup-utils.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup-utils.Tpo -c src/libcrun/cgroup-utils.c -o src/libcrun/libcrun_la-cgroup-utils.o mv -f src/libcrun/.deps/libcrun_la-cgroup-utils.Tpo src/libcrun/.deps/libcrun_la-cgroup-utils.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup.Tpo -c -o src/libcrun/libcrun_la-cgroup.lo `test -f 'src/libcrun/cgroup.c' || echo './'`src/libcrun/cgroup.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cgroup.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cgroup.Tpo -c src/libcrun/cgroup.c -o src/libcrun/libcrun_la-cgroup.o mv -f src/libcrun/.deps/libcrun_la-cgroup.Tpo src/libcrun/.deps/libcrun_la-cgroup.Plo :11: note: (37) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (39) calling 'xmalloc' from 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (42) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (45) returning to 'append_systemd_annotation' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (46) 'xmalloc(256)' leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(name_len + 2)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling 'enter_systemd_cgroup_scope' from 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling 'open_sd_bus_connection' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to 'enter_systemd_cgroup_scope' from 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following 'false' branch (when 'slice' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following 'true' branch (when 'annotations' is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following 'false' branch (when 'len > 23')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling 'append_systemd_annotation' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:585:6: note: (33) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:586:14: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:586:7: note: (35) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (37) calling 'xmalloc' from 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (38) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (39) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (40) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:590:18: note: (43) returning to 'append_systemd_annotation' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (44) 'xmalloc(name_len + 2)' leaks here; was allocated at (39) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd_cpuset' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1355:1: note: (1) entry to 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1368:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1371:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1372:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1375:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1376:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1379:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1383:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1389:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1390:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1396:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1397:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1403:9: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1404:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1407:12: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1408:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1414:12: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1415:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (20) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:55: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (22) calling 'setup_rt_runtime' from 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:143:1: note: (23) entry to 'setup_rt_runtime' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:147:21: note: (24) inlined call to 'cleanup_closep' from 'setup_rt_runtime' <--[gcc] In function 'cleanup_closep', inlined from 'setup_rt_runtime' at src/libcrun/cgroup-systemd.c:147:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:146:22: note: (26) inlined call to 'cleanup_freep' from 'setup_rt_runtime' <--[gcc] In function 'cleanup_freep', inlined from 'setup_rt_runtime' at src/libcrun/cgroup-systemd.c:146:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (28) returning to 'libcrun_update_resources_systemd' from 'setup_rt_runtime' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1424:10: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:66: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:13: note: (31) calling 'setup_cpuset_for_systemd_v1' from 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:242:1: note: (32) entry to 'setup_cpuset_for_systemd_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:249:6: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:252:9: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:253:6: note: (35) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:256:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:257:6: note: (37) following 'false' branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:260:27: note: (39) following 'true' branch (when 'parent != 2')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:265:13: note: (41) following 'false' branch (when 'parent == 0')... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:266:10: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (45) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:270:10: note: (46) assuming 'dirfd_cpuset' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:270:10: note: (47) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:273:13: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:274:10: note: (49) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:263:26: note: (50) inlined call to 'cleanup_freep' from 'setup_cpuset_for_systemd_v1' <--[gcc] In function 'cleanup_freep', inlined from 'setup_cpuset_for_systemd_v1' at src/libcrun/cgroup-systemd.c:263:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (52) inlined call to 'cleanup_closep' from 'setup_cpuset_for_systemd_v1' <--[gcc] In function 'cleanup_closep', inlined from 'setup_cpuset_for_systemd_v1' at src/libcrun/cgroup-systemd.c:262:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (53) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (54) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (55) inlined call to 'cleanup_closep' from 'setup_cpuset_for_systemd_v1' <--[gcc] In function 'cleanup_closep', inlined from 'setup_cpuset_for_systemd_v1' at src/libcrun/cgroup-systemd.c:262:25: cc1: note: (56) calling 'cleanup_closep.part.0' from 'setup_cpuset_for_systemd_v1' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (57) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (58) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (59) following 'true' branch... <--[gcc] cc1: note: (60) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (61) second 'close' here; first 'close' was at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'append_systemd_annotation': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(value)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling 'enter_systemd_cgroup_scope' from 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling 'open_sd_bus_connection' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to 'enter_systemd_cgroup_scope' from 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following 'false' branch (when 'slice' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following 'true' branch (when 'annotations' is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following 'false' branch (when 'len > 23')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling 'append_systemd_annotation' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (37) calling 'xstrdup' from 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (38) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (39) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (42) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (43) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (44) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:612:22: note: (45) returning to 'append_systemd_annotation' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (46) 'xstrdup(value)' leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(value + 1)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1262:1: note: (1) entry to 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1278:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1281:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1283:9: note: (4) calling 'enter_systemd_cgroup_scope' from 'libcrun_cgroup_enter_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:997:1: note: (5) entry to 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (6) calling 'open_sd_bus_connection' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:755:1: note: (7) entry to 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:761:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:764:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1028:9: note: (10) returning to 'enter_systemd_cgroup_scope' from 'open_sd_bus_connection' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1029:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1032:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1033:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1036:12: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1038:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1044:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1045:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1051:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1052:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1058:6: note: (21) following 'false' branch (when 'slice' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1068:6: note: (23) following 'true' branch (when 'annotations' is non-NULL)... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1073:21: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:40: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1077:14: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1080:17: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1081:14: note: (29) following 'false' branch (when 'len > 23')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1088:55: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1087:17: note: (31) calling 'append_systemd_annotation' from 'enter_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:571:1: note: (32) entry to 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:597:6: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:12: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:607:11: note: (35) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:625:11: note: (37) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (39) calling 'xmalloc' from 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:629:35: note: (43) returning to 'append_systemd_annotation' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:24: note: (44) calling 'xstrdup' from 'append_systemd_annotation' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (48) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (49) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (50) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (51) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:632:24: note: (52) returning to 'append_systemd_annotation' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (53) 'xstrdup(value + 1)' leaks here; was allocated at (48) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'setup_cpuset_for_systemd_v1': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: warning: leak of file descriptor 'open(path_to_cpuset, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1355:1: note: (1) entry to 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1368:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1371:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1372:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1375:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1376:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1379:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1383:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1389:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1390:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1396:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1397:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1403:9: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1404:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1407:12: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1408:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1414:12: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1415:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1421:6: note: (20) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:55: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (22) calling 'setup_rt_runtime' from 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:143:1: note: (23) entry to 'setup_rt_runtime' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:147:21: note: (24) inlined call to 'cleanup_closep' from 'setup_rt_runtime' <--[gcc] In function 'cleanup_closep', inlined from 'setup_rt_runtime' at src/libcrun/cgroup-systemd.c:147:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'setup_cpuset_for_systemd_v1': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:146:22: note: (26) inlined call to 'cleanup_freep' from 'setup_rt_runtime' <--[gcc] In function 'cleanup_freep', inlined from 'setup_rt_runtime' at src/libcrun/cgroup-systemd.c:146:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'setup_cpuset_for_systemd_v1': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1423:13: note: (28) returning to 'libcrun_update_resources_systemd' from 'setup_rt_runtime' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1424:10: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:66: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1427:13: note: (31) calling 'setup_cpuset_for_systemd_v1' from 'libcrun_update_resources_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:242:1: note: (32) entry to 'setup_cpuset_for_systemd_v1' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:249:6: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:252:9: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:253:6: note: (35) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:256:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:257:6: note: (37) following 'false' branch... <--[gcc] cc1: note: (38) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:260:27: note: (39) following 'true' branch (when 'parent != 2')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:262:25: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:265:13: note: (41) following 'false' branch (when 'parent == 0')... <--[gcc] cc1: note: (42) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:266:10: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (45) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:269:22: note: (46) 'open(path_to_cpuset, 589824)' leaks here; was opened at (45) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'get_cgroup_scope_path': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (1) entry to 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (2) calling 'xstrdup' from 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (3) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (4) following 'true' branch (when 'str' is NULL)... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (6) returning to 'get_cgroup_scope_path' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (7) argument 1 ('xstrdup(cgroup_path)') NULL where non-null expected <--[gcc] <built-in>: note: argument 1 of '__builtin_strchr' must be non-null /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c: In function 'libcrun_destroy_cgroup_systemd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: warning: leak of 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1330:1: note: (1) entry to 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1338:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1341:43: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (4) calling 'libcrun_destroy_systemd_cgroup_scope' from 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1180:1: note: (5) entry to 'libcrun_destroy_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1235:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:7: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:7: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1241:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (12) returning to 'libcrun_destroy_cgroup_systemd' from 'libcrun_destroy_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (13) calling 'get_cgroup_scope_path' from 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (14) entry to 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (15) calling 'xstrdup' from 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (23) returning to 'get_cgroup_scope_path' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (24) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (25) following 'false' branch (when 'cur' is NULL)... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (27) returning to 'libcrun_destroy_cgroup_systemd' from 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (28) 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)' leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: warning: leak of 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1330:1: note: (1) entry to 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1338:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1341:43: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (4) calling 'libcrun_destroy_systemd_cgroup_scope' from 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1180:1: note: (5) entry to 'libcrun_destroy_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1235:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:7: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1237:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:7: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1239:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1241:3: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1345:9: note: (12) returning to 'libcrun_destroy_cgroup_systemd' from 'libcrun_destroy_systemd_cgroup_scope' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (13) calling 'get_cgroup_scope_path' from 'libcrun_destroy_cgroup_systemd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1302:1: note: (14) entry to 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (15) calling 'xstrdup' from 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1307:19: note: (23) returning to 'get_cgroup_scope_path' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1309:9: note: (24) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (25) following 'true' branch (when 'cur' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:20: note: (27) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1313:10: note: (28) following 'false' branch (when 'next' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1316:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1317:10: note: (30) following 'false' branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1319:13: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1322:19: note: (32) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1323:12: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1310:10: note: (34) following 'true' branch (when 'cur' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:20: note: (36) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1313:10: note: (37) following 'false' branch (when 'next' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1316:13: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1349:19: note: (39) returning to 'libcrun_destroy_cgroup_systemd' from 'get_cgroup_scope_path' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-systemd.c:1312:32: note: (40) 'get_cgroup_scope_path(*cgroup_status.path, *cgroup_status.scope)' leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c: In function ‘libcrun_safe_chdir’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3651: error: uninitvar(CWE-457): Uninitialized variable: code <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:5751:14: warning: ignoring return value of ‘chdir’ declared with attribute ‘warn_unused_result’ [-Wunused-result] <--[gcc] 5751 | (void) chdir ("/"); | ^~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:496:20: warning: Potential leak of memory pointed to by 'mappings' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:707:3: warning: Value stored to 'pid' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:1700:21: warning: Potential leak of memory pointed to by 'dirname' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:1790:51: warning: Array access (via field 'fds') results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2025:12: warning: Potential leak of memory pointed to by 'buffer' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2103:16: warning: Potential leak of memory pointed to by 'data' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2346:12: warning: Potential leak of memory pointed to by 'data' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2510:36: warning: Potential leak of memory pointed to by 'container_notify_socket_path_dir_alloc' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2558:16: warning: Potential leak of memory pointed to by 'tmp' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2624:18: warning: Although the value stored to 'rootfsfd_cleanup' is used in the enclosing expression, the value is never actually read from 'rootfsfd_cleanup' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3043:11: warning: Potential leak of memory pointed to by 'gid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3043:11: warning: Potential leak of memory pointed to by 'gid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3074:11: warning: Potential leak of memory pointed to by 'uid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3074:11: warning: Potential leak of memory pointed to by 'uid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3090:15: warning: Potential leak of memory pointed to by 'single_mapping' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3386:15: warning: Value stored to 'namespace' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3488:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:4861:11: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:5746:12: warning: Potential leak of memory pointed to by 'buffer' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c: internal warning: child 11514 timed out after 30s <--[gcc] cswrap: error: child 11514 (/usr/bin/gcc) terminated by signal 15 (timed out) /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'write_controller_file': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(controllers_len + 1)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:754:1: note: (1) entry to 'write_controller_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:768:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:770:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:771:6: note: (4) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (6) calling 'xmalloc' from 'write_controller_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (9) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (12) returning to 'write_controller_file' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (13) 'xmalloc(controllers_len + 1)' leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:21, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'maybe_make_cgroup_threaded': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(t)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:754:1: note: (1) entry to 'write_controller_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:768:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:770:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:771:6: note: (4) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (6) calling 'xmalloc' from 'write_controller_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:773:45: note: (10) returning to 'write_controller_file' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:802:10: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:804:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:804:17: note: (13) calling 'maybe_make_cgroup_threaded' from 'write_controller_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:75:1: note: (14) entry to 'maybe_make_cgroup_threaded' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:88:20: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:91:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:92:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:95:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:96:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:99:12: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:106:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (23) calling 'xstrdup' from 'maybe_make_cgroup_threaded' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:109:12: note: (31) returning to 'maybe_make_cgroup_threaded' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (32) 'xstrdup(t)' leaks here; was allocated at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c: In function 'libcrun_get_cgroup_dirfd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: warning: leak of file descriptor 'open(path_to_cgroup, 720896)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:939:1: note: (1) entry to 'libcrun_get_cgroup_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:947:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:950:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:950:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:953:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:953:6: note: (6) following 'false' branch (when 'status' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:956:30: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:956:7: note: (8) inlined call to 'is_empty_string' from 'libcrun_get_cgroup_dirfd' <--[gcc] In function 'is_empty_string', inlined from 'libcrun_get_cgroup_dirfd' at src/libcrun/cgroup-utils.c:956:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c: In function 'libcrun_get_cgroup_dirfd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:959:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:960:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (13) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:963:17: note: (14) 'open(path_to_cgroup, 720896)' leaks here; was opened at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:371:11: warning: Value stored to 'child_dfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:624:15: warning: Value stored to 'state' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-utils.c:781:16: warning: Potential leak of memory pointed to by 'controllers_copy' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup-internal.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_cgroup_enter': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0(24)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:284:1: note: (1) entry to 'libcrun_cgroup_enter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (2) calling 'xmalloc0' from 'libcrun_cgroup_enter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (8) returning to 'libcrun_cgroup_enter' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) 'xmalloc0(24)' leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function 'libcrun_cgroup_destroy': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: warning: dereference of NULL 'cgroup_manager' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:195:1: note: (1) entry to 'libcrun_cgroup_destroy' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:197:34: note: (2) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:200:9: note: (3) calling 'get_cgroup_manager' from 'libcrun_cgroup_destroy' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (4) entry to 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (5) following 'default:' branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:200:9: note: (7) returning to 'libcrun_cgroup_destroy' from 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:201:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (10) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:24: note: (11) dereference of NULL 'cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function 'libcrun_update_cgroup_resources': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: warning: dereference of NULL 'cgroup_manager' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:208:1: note: (1) entry to 'libcrun_update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:212:34: note: (2) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:215:9: note: (3) calling 'get_cgroup_manager' from 'libcrun_update_cgroup_resources' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (4) entry to 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (5) following 'default:' branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:215:9: note: (7) returning to 'libcrun_update_cgroup_resources' from 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:216:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (10) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:21: note: (11) dereference of NULL 'cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function 'libcrun_cgroup_preenter': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: warning: dereference of NULL 'cgroup_manager' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:258:1: note: (1) entry to 'libcrun_cgroup_preenter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:267:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:270:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:270:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (6) calling 'get_cgroup_manager' from 'libcrun_cgroup_preenter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (7) entry to 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (8) following 'default:' branch... <--[gcc] cc1: note: (9) ...to here cc1: note: (10) calling 'get_cgroup_manager.part.0' from 'get_cgroup_manager' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (11) entry to 'get_cgroup_manager.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (12) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (13) 'cgroup_manager' is NULL <--[gcc] cc1: note: (14) returning to 'get_cgroup_manager' from 'get_cgroup_manager.part.0' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:273:9: note: (15) returning to 'libcrun_cgroup_preenter' from 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:274:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (18) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:21: note: (19) dereference of NULL 'cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c: In function 'libcrun_cgroup_enter': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: warning: dereference of NULL 'cgroup_manager' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:284:1:make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-chroot_realpath.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-chroot_realpath.Tpo -c -o src/libcrun/libcrun_la-chroot_realpath.lo `test -f 'src/libcrun/chroot_realpath.c' || echo './'`src/libcrun/chroot_realpath.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-chroot_realpath.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-chroot_realpath.Tpo -c src/libcrun/chroot_realpath.c -o src/libcrun/libcrun_la-chroot_realpath.o mv -f src/libcrun/.deps/libcrun_la-chroot_realpath.Tpo src/libcrun/.deps/libcrun_la-chroot_realpath.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-utils.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-utils.Tpo -c -o src/libcrun/libcrun_la-utils.lo `test -f 'src/libcrun/utils.c' || echo './'`src/libcrun/utils.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-utils.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-utils.Tpo -c src/libcrun/utils.c -o src/libcrun/libcrun_la-utils.o mv -f src/libcrun/.deps/libcrun_la-utils.Tpo src/libcrun/.deps/libcrun_la-utils.Plo note: (1) entry to 'libcrun_cgroup_enter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (2) calling 'xmalloc0' from 'libcrun_cgroup_enter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:288:64: note: (6) returning to 'libcrun_cgroup_enter' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:296:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:304:7: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:328:9: note: (9) calling 'get_cgroup_manager' from 'libcrun_cgroup_enter' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (10) entry to 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:68:3: note: (11) following 'default:' branch... <--[gcc] cc1: note: (12) ...to here cc1: note: (13) calling 'get_cgroup_manager.part.0' from 'get_cgroup_manager' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:66:1: note: (14) entry to 'get_cgroup_manager.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (15) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:83:8: note: (16) 'cgroup_manager' is NULL <--[gcc] cc1: note: (17) returning to 'get_cgroup_manager' from 'get_cgroup_manager.part.0' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:328:9: note: (18) returning to 'libcrun_cgroup_enter' from 'get_cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:329:6: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:332:25: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: note: (21) 'cgroup_manager' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:23: note: (22) dereference of NULL 'cgroup_manager' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:204:10: warning: Access to field 'destroy_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:219:7: warning: Access to field 'update_resources' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:277:7: warning: Access to field 'precreate_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:297:12: warning: Potential leak of memory pointed to by 'status' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.c:334:9: warning: Access to field 'create_cgroup' results in a dereference of a null pointer (loaded from variable 'cgroup_manager') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/chroot_realpath.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/chroot_realpath.c:55:8: warning: Value stored to 'got_path_root' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:21: <--[gcc] In function 'cleanup_closep', inlined from 'read_all_file_at' at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: 'fd' may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 104 | if (*pp >= 0) | ^~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_all_file_at': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: 'fd' declared here <--[gcc] 1040 | cleanup_close int fd; | ^~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:314:7: warning: Potential leak of memory pointed to by 'tmp' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:395:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:445:16: warning: Potential leak of memory pointed to by 'tmp_buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:587:7: warning: Potential leak of memory pointed to by 'cur' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1089:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1123:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1272:3: warning: Value stored to 'epollfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1429:11: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1444:20: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1492:15: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1492:15: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1773:3: warning: Value stored to 'cfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:9: warning: Although the value stored to 'tmp' is used in the enclosing expression, the value is never actually read from 'tmp' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1925:13: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2003:12: warning: Potential leak of memory pointed to by 'buf' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2024:10: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2126:11: warning: Value stored to 'destfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2149:11: warning: Value stored to 'srcfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2149:19: warning: Although the value stored to 'destfd' is used in the enclosing expression, the value is never actually read from 'destfd' [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'read_all_fd_with_size_hint': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(allocated + 1)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (1) entry to 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (2) calling 'read_all_file' from 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (3) entry to 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (4) calling 'read_all_file_at' from 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (5) entry to 'read_all_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1043:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1046:10: note: (7) inlined call to 'read_all_fd' from 'read_all_file_at' <--[gcc] In function 'read_all_fd', inlined from 'read_all_file_at' at src/libcrun/utils.c:1046:10: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (9) calling 'read_all_fd_with_size_hint' from 'read_all_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_all_fd_with_size_hint': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:975:1: note: (10) entry to 'read_all_fd_with_size_hint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:983:6: note: (11) following 'false' branch (when 'size_hint == 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (13) calling 'get_file_size' from 'read_all_fd_with_size_hint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:666:1: note: (14) entry to 'get_file_size' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:676:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:682:14: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:987:13: note: (17) returning to 'read_all_fd_with_size_hint' from 'get_file_size' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:988:10: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:991:24: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:995:9: note: (20) calling 'xmalloc' from 'read_all_fd_with_size_hint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (21) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (22) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (23) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:995:9: note: (26) returning to 'read_all_fd_with_size_hint' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (27) 'xmalloc(allocated + 1)' leaks here; was allocated at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'copy_from_fd_to_fd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(get_page_size())' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 32768:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (21) calling 'copy_from_fd_to_fd' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1277:1: note: (22) entry to 'copy_from_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1302:16: note: (23) calling 'xmalloc' from 'copy_from_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1302:16: note: (29) returning to 'copy_from_fd_to_fd' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (30) 'xmalloc(get_page_size())' leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'copy_xattr': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc((long unsigned int)(xattr_len + 1))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1981:1: note: (1) entry to 'copy_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1988:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1996:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1996:6: note: (4) following 'false' branch (when 'xattr_len != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:28: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:9: note: (6) calling 'xmalloc' from 'copy_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (7) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (9) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1999:9: note: (12) returning to 'copy_xattr' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (13) 'xmalloc((long unsigned int)(xattr_len + 1))' leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'safe_read_xattr': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc((long unsigned int)(current_size + 1))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling 'xmalloc' from 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (8) returning to 'safe_read_xattr' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (9) 'xmalloc((long unsigned int)(current_size + 1))' leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of 'xrealloc(buffer, (long unsigned int)(current_size + 1))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling 'xmalloc' from 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (6) returning to 'safe_read_xattr' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1958:10: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (9) following 'false' branch (when 'current_size <= s')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1964:20: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (11) calling 'xrealloc' from 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (12) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (13) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (17) returning to 'safe_read_xattr' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (18) 'xrealloc(buffer, (long unsigned int)(current_size + 1))' leaks here; was allocated at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'safe_readlinkat': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of 'xrealloc(tmp_buf, (long unsigned int)(buf_size + 1))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 40960:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (17) calling 'safe_readlinkat' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (18) entry to 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (19) following 'false' branch (when 'tmp_buf' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (21) calling 'xrealloc' from 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (22) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (23) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to 'safe_readlinkat' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (28) 'xrealloc(tmp_buf, (long unsigned int)(buf_size + 1))' leaks here; was allocated at (23) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In function 'cleanup_freep', inlined from 'safe_read_xattr' at src/libcrun/utils.c:1948:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-'free' of 'buffer' [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'safe_read_xattr': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1946:1: note: (1) entry to 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (2) calling 'xmalloc' from 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1953:12: note: (8) returning to 'safe_read_xattr' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1958:10: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1961:10: note: (11) following 'false' branch (when 'current_size <= s')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1964:20: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (13) calling 'xrealloc' from 'safe_read_xattr' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (14) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (15) first 'free' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (16) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1965:16: note: (19) returning to 'safe_read_xattr' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1948:22: note: (20) inlined call to 'cleanup_freep' from 'safe_read_xattr' <--[gcc] In function 'cleanup_freep', inlined from 'safe_read_xattr' at src/libcrun/utils.c:1948:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (21) second 'free' here; first 'free' was at (15) <--[gcc] In function 'cleanup_freep', inlined from 'safe_readlinkat' at src/libcrun/utils.c:432:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-'free' of 'tmp_buf' [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'safe_readlinkat': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2089:26: note: (6) first 'free' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (9) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (10) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (13) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (16) following 'case 40960:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (18) calling 'safe_readlinkat' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (19) entry to 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (20) following 'false' branch (when 'tmp_buf' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (22) passing freed pointer 'tmp_buf' in call to 'xrealloc' from 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (23) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to 'safe_readlinkat' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:432:22: note: (28) inlined call to 'cleanup_freep' from 'safe_readlinkat' <--[gcc] In function 'cleanup_freep', inlined from 'safe_readlinkat' at src/libcrun/utils.c:432:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (29) second 'free' here; first 'free' was at (6) <--[gcc] In function 'cleanup_closep', inlined from 'read_all_file_at' at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value 'fd' [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_all_file_at': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (1) entry to 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (2) calling 'read_all_file' from 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (3) entry to 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (4) calling 'read_all_file_at' from 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (5) entry to 'read_all_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (6) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (7) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (8) inlined call to 'cleanup_closep' from 'read_all_file_at' <--[gcc] In function 'cleanup_closep', inlined from 'read_all_file_at' at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (9) use of uninitialized value 'fd' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value 'fd' [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_all_file_at': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2495:1: note: (1) entry to 'get_overflow_uid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2499:6: note: (2) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2501:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2501:13: note: (4) calling 'read_file_as_long_or_default' from 'get_overflow_uid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (5) entry to 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (6) calling 'read_all_file' from 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (7) entry to 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (8) calling 'read_all_file_at' from 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (9) entry to 'read_all_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (10) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (11) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (12) inlined call to 'cleanup_closep' from 'read_all_file_at' <--[gcc] In function 'cleanup_closep', inlined from 'read_all_file_at' at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (13) use of uninitialized value 'fd' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: warning: use of uninitialized value 'fd' [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_all_file_at': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2508:1: note: (1) entry to 'get_overflow_gid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2512:6: note: (2) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2514:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2514:13: note: (4) calling 'read_file_as_long_or_default' from 'get_overflow_gid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2468:1: note: (5) entry to 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2476:9: note: (6) calling 'read_all_file' from 'read_file_as_long_or_default' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1050:1: note: (7) entry to 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1055:10: note: (8) calling 'read_all_file_at' from 'read_all_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1038:1: note: (9) entry to 'read_all_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (10) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (11) capacity: 4 bytes <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1040:21: note: (12) inlined call to 'cleanup_closep' from 'read_all_file_at' <--[gcc] In function 'cleanup_closep', inlined from 'read_all_file_at' at src/libcrun/utils.c:1040:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (13) use of uninitialized value 'fd' here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:26: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'destdirfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 16384:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2129:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2131:14: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2134:19: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2135:14: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2138:20: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2139:14: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2143:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2144:14: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (25) calling 'copy_recursive_fd_to_fd' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (26) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (29) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (31) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (33) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2102:38: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (35) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (36) following 'false' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2075:20: note: (38) inlined call to 'cleanup_dirp' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_dirp', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2075:20: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (39) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:198:5: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2074:21: note: (41) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2074:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (42) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (43) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2074:21: note: (44) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2074:21: cc1: note: (45) calling 'cleanup_closep.part.0' from 'copy_recursive_fd_to_fd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (46) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (47) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (48) following 'true' branch... <--[gcc] cc1: note: (49) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (50) second 'close' here; first 'close' was at (47) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'srcfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 16384:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2129:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2131:14: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2134:19: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2135:14: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2138:20: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2139:14: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2143:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2144:14: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2148:17: note: (25) calling 'copy_recursive_fd_to_fd' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (26) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (29) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (31) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (33) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (35) following 'case 32768:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (37) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (39) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2113:42: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (41) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (42) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (43) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2087:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (45) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (46) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (47) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2087:25: cc1: note: (48) calling 'cleanup_closep.part.0' from 'copy_recursive_fd_to_fd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (49) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (50) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (51) following 'true' branch... <--[gcc] cc1: note: (52) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (53) second 'close' here; first 'close' was at (50) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'destfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 32768:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2116:14: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2120:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2121:14: note: (23) following 'false' branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (25) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (26) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2088:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (27) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2088:25: note: (29) inlined call to 'cleanup_closep' from 'copy_recursive_fd_to_fd' <--[gcc] In function 'cleanup_closep', inlined from 'copy_recursive_fd_to_fd' at src/libcrun/utils.c:2088:25: cc1: note: (30) calling 'cleanup_closep.part.0' from 'copy_recursive_fd_to_fd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (31) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (32) second 'close' here; first 'close' was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'find_executable': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(getenv("PATH"))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1873:1: note: (1) entry to 'find_executable' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1882:6: note: (2) following 'false' branch (when 'executable_path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:22: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:33: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:66: note: (6) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:63: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:22: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:24: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:15: note: (11) calling 'xstrdup' from 'find_executable' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (12) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (13) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (16) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (17) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1916:15: note: (19) returning to 'find_executable' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) 'xstrdup(getenv("PATH"))' leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(executable_path)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1873:1: note: (1) entry to 'find_executable' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1882:6: note: (2) following 'false' branch (when 'executable_path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:22: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1888:33: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1908:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (8) calling 'check_access' from 'find_executable' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1846:1: note: (9) entry to 'check_access' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1859:9: note: (10) inlined call to 'get_file_type' from 'check_access' <--[gcc] In function 'get_file_type', inlined from 'check_access' at src/libcrun/utils.c:1859:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:241:10: note: (11) calling 'get_file_type_at' from 'check_access' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'find_executable': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:209:1: note: (12) entry to 'get_file_type_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:211:49: note: (13) following 'false' branch (when 'path' is non-NULL)... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:80: note: (15) following 'false' branch (when 'nofollow == 0')... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:9: note: (17) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:220:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1859:9: note: (19) inlined call to 'get_file_type' from 'check_access' <--[gcc] In function 'get_file_type', inlined from 'check_access' at src/libcrun/utils.c:1859:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:241:10: note: (20) returning to 'check_access' from 'get_file_type_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'find_executable': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1910:13: note: (21) returning to 'find_executable' from 'check_access' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1911:10: note: (22) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (24) calling 'xstrdup' from 'find_executable' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (25) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (26) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (30) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:1912:16: note: (32) returning to 'find_executable' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) 'xstrdup(executable_path)' leaks here; was allocated at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'copy_recursive_fd_to_fd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: warning: leak of 'fdopendir(srcdirfd)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: note: (1) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2078:12: note: (2) 'fdopendir(srcdirfd)' leaks here; was allocated at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: warning: double 'close' of file descriptor 'srcdirfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (1) following 'true' branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: note: (3) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:7: note: (4) following 'true' branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2081:27: note: (6) second 'close' here; first 'close' was at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: warning: double 'close' of file descriptor 'destfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cloned_binary.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cloned_binary.Tpo -c -o src/libcrun/libcrun_la-cloned_binary.lo `test -f 'src/libcrun/cloned_binary.c' || echo './'`src/libcrun/cloned_binary.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-cloned_binary.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-cloned_binary.Tpo -c src/libcrun/cloned_binary.c -o src/libcrun/libcrun_la-cloned_binary.o mv -f src/libcrun/.deps/libcrun_la-cloned_binary.Tpo src/libcrun/.deps/libcrun_la-cloned_binary.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-handler-utils.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-handler-utils.Tpo -c -o src/libcrun/handlers/libcrun_la-handler-utils.lo `test -f 'src/libcrun/handlers/handler-utils.c' || echo './'`src/libcrun/handlers/handler-utils.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-handler-utils.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-handler-utils.Tpo -c src/libcrun/handlers/handler-utils.c -o src/libcrun/handlers/libcrun_la-handler-utils.o mv -f src/libcrun/handlers/.deps/libcrun_la-handler-utils.Tpo src/libcrun/handlers/.deps/libcrun_la-handler-utils.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-custom-handler.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-custom-handler.Tpo -c -o src/libcrun/libcrun_la-custom-handler.lo `test -f 'src/libcrun/custom-handler.c' || echo './'`src/libcrun/custom-handler.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-custom-handler.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-custom-handler.Tpo -c src/libcrun/custom-handler.c -o src/libcrun/libcrun_la-custom-handler.o mv -f src/libcrun/.deps/libcrun_la-custom-handler.Tpo src/libcrun/.deps/libcrun_la-custom-handler.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-mono.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-mono.Tpo -c -o src/libcrun/handlers/libcrun_la-mono.lo `test -f 'src/libcrun/handlers/mono.c' || echo './'`src/libcrun/handlers/mono.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-mono.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-mono.Tpo -c src/libcrun/handlers/mono.c -o src/libcrun/handlers/libcrun_la-mono.o mv -f src/libcrun/handlers/.deps/libcrun_la-mono.Tpo src/libcrun/handlers/.deps/libcrun_la-mono.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-error.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-error.Tpo -c -o src/libcrun/libcrun_la-error.lo `test -f 'src/libcrun/error.c' || echo './'`src/libcrun/error.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-error.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-error.Tpo -c src/libcrun/error.c -o src/libcrun/libcrun_la-error.o mv -f src/libcrun/.deps/libcrun_la-error.Tpo src/libcrun/.deps/libcrun_la-error.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-container.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-container.Tpo -c -o src/libcrun/libcrun_la-container.lo `test -f 'src/libcrun/container.c' || echo './'`src/libcrun/container.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-container.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-container.Tpo -c src/libcrun/container.c -o src/libcrun/libcrun_la-container.o mv -f src/libcrun/.deps/libcrun_la-container.Tpo src/libcrun/.deps/libcrun_la-container.Plo 15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (9) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (12) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (15) following 'case 32768:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2106:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2108:14: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2111:20: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2112:14: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2115:17: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2116:14: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2120:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2121:14: note: (23) following 'false' branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (25) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:11: note: (26) following 'true' branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2125:31: note: (28) second 'close' here; first 'close' was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: warning: use of NULL 'target_buf' where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2072:1: note: (1) entry to 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2079:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2085:31: note: (4) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2087:25: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2089:26: note: (6) 'target_buf' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2097:10: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (9) calling 'copy_rec_stat_file_at' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2030:1: note: (10) entry to 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2042:6: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2044:11: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2100:13: note: (13) returning to 'copy_recursive_fd_to_fd' from 'copy_rec_stat_file_at' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2101:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:20: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2104:7: note: (16) following 'case 40960:' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2154:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (18) calling 'safe_readlinkat' from 'copy_recursive_fd_to_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:429:1: note: (19) entry to 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:437:10: note: (20) following 'false' branch (when 'tmp_buf' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:45: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (22) calling 'xrealloc' from 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (23) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (24) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:441:17: note: (27) returning to 'safe_readlinkat' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2155:17: note: (28) returning to 'copy_recursive_fd_to_fd' from 'safe_readlinkat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2156:14: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (31) 'target_buf' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (32) 'target_buf' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2159:17: note: (33) argument 1 ('target_buf') NULL where non-null expected <--[gcc] /usr/include/unistd.h:847:12: note: argument 1 of 'symlinkat' must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c: In function 'read_file_as_long_or_default': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2484:9: warning: use of NULL 'content' where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2470:22: note: (1) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2477:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2483:3: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.c:2484:9: note: (4) argument 1 ('content') NULL where non-null expected <--[gcc] In file included from /usr/include/features.h:511, <--[gcc] from /usr/include/bits/libc-header-start.h:33, <--[gcc] from /usr/include/stdio.h:28, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:22: <--[gcc] /usr/include/stdlib.h:215:17: note: argument 1 of 'strtol' must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:43: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:17: warning: Array access results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function 'fetchve': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: warning: leak of 'read_file("/proc/self/cmdline", &cmdline_size)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to 'ensure_cloned_binary' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) calling 'fetchve' from 'ensure_cloned_binary' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (5) entry to 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (6) calling 'read_file' from 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (7) entry to 'read_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (8) following 'false' branch (when 'length' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (16) calling 'xrealloc' from 'read_file' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:61: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (17) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to 'read_file' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to 'fetchve' from 'read_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling 'parse_xargs' from 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to 'parse_xargs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following 'false' branch... <--[gcc] cc1: note: (33) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (34) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (36) calling 'xrealloc' from 'parse_xargs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (37) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (38) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (41) returning to 'parse_xargs' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:217:20: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (44) calling 'xrealloc' from 'parse_xargs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (45) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (46) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (47) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:218:27: note: (49) returning to 'parse_xargs' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (50) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (52) returning to 'fetchve' from 'parse_xargs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (53) 'read_file("/proc/self/cmdline", &cmdline_size)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c: In function 'parse_xargs': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: warning: dereference of NULL '0' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:520:5: note: (1) entry to 'ensure_cloned_binary' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:523:16: note: (2) 'argv' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:527:12: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:530:13: note: (5) calling 'fetchve' from 'ensure_cloned_binary' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:231:12: note: (6) entry to 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (7) calling 'read_file' from 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:168:14: note: (8) entry to 'read_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:173:12: note: (9) following 'false' branch (when 'length' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:176:14: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:177:12: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:180:17: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:40: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (17) calling 'xrealloc' from 'read_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (18) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (19) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:190:24: note: (22) returning to 'read_file' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:185:20: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:187:20: note: (25) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:194:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:236:19: note: (27) returning to 'fetchve' from 'read_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:237:12: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:240:13: note: (30) calling 'parse_xargs' from 'fetchve' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:208:12: note: (31) entry to 'parse_xargs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:12: note: (32) following 'false' branch (when 'data' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:22: note: (34) 'argv' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:213:19: note: (35) following 'false' branch... <--[gcc] cc1: note: (36) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:216:20: note: (37) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:10: note: (39) 'argv' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:18: note: (40) 'argv' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:222:24: note: (41) dereference of NULL '*output + (long unsigned int)num * 8' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cloned_binary.c:535:11: warning: Potential leak of memory pointed to by 'argv' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/handler-utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/mono.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:661:13: warning: Although the value stored to 'cwd_allocated' is used in the enclosing expression, the value is never actually read from 'cwd_allocated' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:937:7: warning: Access to field 'annotations' results in a dereference of a null pointer (loaded from variable 'def') [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1091:12: warning: Potential leak of memory pointed to by 'rootfs' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1849:12: warning: Potential leak of memory pointed to by 'intelrdt' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2855:3: warning: Value stored to 'exec_fifo_fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3099:3: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3346:20: warning: Potential leak of memory pointed to by 'seccomp_fd_payload' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3399:20: warning: Potential leak of memory pointed to by 'seccomp_fd_payload' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3415:3: warning: Value stored to 'pipefd1' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3621:7: warning: Value stored to 'pipefd0' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3632:3: warning: Value stored to 'pipefd1' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3677:3: warning: Value stored to 'pipefd0' is never read [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_get_features': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0(144)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling 'xmalloc0' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (8) returning to 'libcrun_container_get_features' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) 'xmalloc0(144)' leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'retrieve_mount_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0((num_mount_options + 1) * 8)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3924:1: note: (1) entry to 'retrieve_mount_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (2) calling 'xmalloc0' from 'retrieve_mount_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (8) returning to 'retrieve_mount_options' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (9) 'xmalloc0((num_mount_options + 1) * 8)' leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_load_from_file': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'make_container(runtime_spec_schema_config_schema_parse_file(path, 0, & oci_error), path, 0)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling 'libcrun_container_load_from_file' from 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (18) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (19) following 'false' branch (when 'path' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (24) 'make_container(runtime_spec_schema_config_schema_parse_file(path, 0, & oci_error), path, 0)' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_update_intel_rdt': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'libcrun_container_load_from_file(config_file, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling 'libcrun_container_load_from_file' from 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (15) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (18) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (19) following 'false' branch (when 'path' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (24) returning to 'libcrun_container_update_intel_rdt' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (25) 'libcrun_container_load_from_file(config_file, err)' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_restore': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'libcrun_container_load_from_file("config.json", err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling 'libcrun_container_load_from_file' from 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (11) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (14) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (15) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (17) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (18) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (19) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (27) returning to 'libcrun_container_restore' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (28) 'libcrun_container_load_from_file("config.json", err)' leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'libcrun_container_load_from_file(config_file, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (19) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (22) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (23) following 'false' branch (when 'path' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (25) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (27) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (28) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (29) 'libcrun_container_load_from_file(config_file, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'read_container_config_from_state': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'libcrun_container_load_from_file(config_file, err)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (4) calling 'read_container_config_from_state' from 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1557:1: note: (5) entry to 'read_container_config_from_state' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1567:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1570:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1571:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (10) calling 'libcrun_container_load_from_file' from 'read_container_config_from_state' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (19) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (22) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (23) following 'false' branch (when 'path' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (25) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (27) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (28) returning to 'read_container_config_from_state' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (29) 'libcrun_container_load_from_file(config_file, err)' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_update': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0(176)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3732:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3735:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3740:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3743:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3744:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3747:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3748:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:6: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (14) calling 'xmalloc0' from 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (15) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (17) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (20) returning to 'libcrun_container_update' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (21) 'xmalloc0(176)' leaks here; was allocated at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0(120)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3732:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3735:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3740:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3743:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3744:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3747:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3748:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3754:6: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (14) calling 'xmalloc0' from 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (15) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3757:62: note: (18) returning to 'libcrun_container_update' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3758:61: note: (19) calling 'xmalloc0' from 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (21) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (22) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3758:61: note: (25) returning to 'libcrun_container_update' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (26) 'xmalloc0(120)' leaks here; was allocated at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_container_load_from_file' at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_restore': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling 'libcrun_container_load_from_file' from 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (13) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (15) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (27) returning to 'libcrun_container_restore' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (28) inlined call to 'cleanup_freep' from 'libcrun_container_load_from_file' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_container_load_from_file' at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (29) '<unknown>' leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_update_intel_rdt': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4347:1: note: (1) entry to 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4355:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4358:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4359:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (6) calling 'libcrun_container_load_from_file' from 'libcrun_container_update_intel_rdt' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (7) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (10) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (11) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (13) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (17) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (19) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (20) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (21) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (23) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (24) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (25) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (27) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (28) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (30) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4362:15: note: (31) returning to 'libcrun_container_update_intel_rdt' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (32) inlined call to 'cleanup_freep' from 'libcrun_container_load_from_file' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_container_load_from_file' at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (33) '<unknown>' leaks here; was allocated at (23) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (21) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (31) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (32) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (34) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (35) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (36) inlined call to 'cleanup_freep' from 'libcrun_container_load_from_file' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_container_load_from_file' at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (37) '<unknown>' leaks here; was allocated at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'read_container_config_from_state': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3714:1: note: (1) entry to 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3728:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3731:9: note: (4) calling 'read_container_config_from_state' from 'libcrun_container_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1557:1: note: (5) entry to 'read_container_config_from_state' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1567:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1570:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1571:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (10) calling 'libcrun_container_load_from_file' from 'read_container_config_from_state' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (21) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (24) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (25) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (28) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (31) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (32) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (34) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1574:16: note: (35) returning to 'read_container_config_from_state' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:558:22: note: (36) inlined call to 'cleanup_freep' from 'libcrun_container_load_from_file' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_container_load_from_file' at src/libcrun/container.c:558:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (37) '<unknown>' leaks here; was allocated at (27) <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'console_socket_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:46: <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:25: <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following 'false' branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:18: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:10: note: (67) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3649:13: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3650:10: note: (69) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:18: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:10: note: (71) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:49: note: (72) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3657:14: note: (73) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3659:17: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:29: note: (75) inlined call to 'cleanup_closep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3656:29: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (76) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (77) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:29: note: (78) inlined call to 'cleanup_closep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3656:29: cc1: note: (79) calling 'cleanup_closep.part.0' from 'libcrun_container_exec_with_options' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (80) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (81) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (82) following 'true' branch... <--[gcc] cc1: note: (83) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (84) second 'close' here; first 'close' was at (81) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'signalfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following 'false' branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following 'false' branch... <--[gcc] cc1: note: (66) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3678:6: note: (67) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:35: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:10: note: (69) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3695:38: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3705:15: note: (71) calling 'wait_for_process' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1928:1: note: (72) entry to 'wait_for_process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1942:6: note: (73) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1945:20: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1956:6: note: (75) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1959:11: note: (76) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1959:6: note: (77) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1966:3: note: (78) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1968:6: note: (79) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1971:14: note: (80) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1972:6: note: (81) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1975:9: note: (82) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1976:6: note: (83) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1979:7: note: (84) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1979:6: note: (85) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1982:11: note: (86) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1982:6: note: (87) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2016:14: note: (88) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2017:6: note: (89) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2019:11: note: (90) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2028:6: note: (91) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1938:67: note: (92) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1931:21: note: (93) inlined call to 'cleanup_closep' from 'wait_for_process' <--[gcc] In function 'cleanup_closep', inlined from 'wait_for_process' at src/libcrun/container.c:1931:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (94) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (95) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1931:21: note: (96) inlined call to 'cleanup_closep' from 'wait_for_process' <--[gcc] In function 'cleanup_closep', inlined from 'wait_for_process' at src/libcrun/container.c:1931:21: cc1: note: (97) calling 'cleanup_closep.part.0' from 'wait_for_process' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (98) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (99) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (100) following 'true' branch... <--[gcc] cc1: note: (101) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (102) second 'close' here; first 'close' was at (99) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'seccomp_receiver_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3311:21: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3339:26: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3351:10: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3355:7: note: (18) calling 'close_and_reset' from 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (19) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (20) following 'true' branch... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (22) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (23) following 'true' branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (25) second 'close' here; first 'close' was at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'seccomp_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following 'false' branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3636:6: note: (65) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3637:5: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3637:5: note: (67) calling 'close_and_reset' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (68) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (69) following 'true' branch... <--[gcc] cc1: note: (70) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (71) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (72) following 'true' branch... <--[gcc] cc1: note: (73) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (74) second 'close' here; first 'close' was at (71) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'terminal_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (50) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (51) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (56) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (57) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (58) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (59) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (61) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (62) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) following 'false' branch... <--[gcc] cc1: note: (64) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (65) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:18: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3643:10: note: (67) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3649:13: note: (68) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3650:10: note: (69) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:18: note: (70) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3653:10: note: (71) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3656:49: note: (72) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3657:14: note: (73) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3659:17: note: (74) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3660:14: note: (75) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3662:11: note: (76) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3662:11: note: (77) calling 'close_and_reset' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (78) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (79) following 'true' branch... <--[gcc] cc1: note: (80) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (81) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (82) following 'true' branch... <--[gcc] cc1: note: (83) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (84) second 'close' here; first 'close' was at (81) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'own_seccomp_receiver_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:6: note: (41) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (43) calling 'get_seccomp_receiver_fd' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2244:1: note: (44) entry to 'get_seccomp_receiver_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2254:6: note: (45) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2259:13: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2260:10: note: (47) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:2263:16: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3536:13: note: (49) returning to 'libcrun_container_exec_with_options' from 'get_seccomp_receiver_fd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3539:10: note: (50) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:29: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (52) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (54) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (55) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (56) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (58) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (59) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (60) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (61) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (62) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (63) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (64) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (65) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (66) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (67) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (68) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (69) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (70) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (71) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (72) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (73) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (74) following 'false' branch... <--[gcc] cc1: note: (75) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3639:6: note: (76) following 'false' branch... <--[gcc] cc1: note: (77) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3678:6: note: (78) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:35: note: (79) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3683:10: note: (80) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3685:31: note: (81) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3686:14: note: (82) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3689:17: note: (83) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3689:17: note: (84) calling 'close_and_reset' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (85) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (86) following 'true' branch... <--[gcc] cc1: note: (87) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (88) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (89) following 'true' branch... <--[gcc] cc1: note: (90) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (91) second 'close' here; first 'close' was at (88) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'seccomp_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:73: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:39: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3315:57: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3339:26: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3351:10: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3354:7: note: (20) calling 'close_and_reset' from 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (21) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (22) following 'true' branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (24) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (25) following 'true' branch... <--[gcc] cc1: note: (26) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (27) second 'close' here; first 'close' was at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_get_features': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup("1.0.0")' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling 'xmalloc0' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (6) returning to 'libcrun_container_get_features' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (7) calling 'xstrdup' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (8) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (9) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (12) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (13) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (15) returning to 'libcrun_container_get_features' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (16) 'xstrdup("1.0.0")' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup("1.1.0+dev")' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3945:1: note: (1) entry to 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (2) calling 'xmalloc0' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3957:11: note: (6) returning to 'libcrun_container_get_features' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (7) calling 'xstrdup' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (8) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (9) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (11) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (12) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3960:30: note: (13) returning to 'libcrun_container_get_features' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3961:30: note: (14) calling 'xstrdup' from 'libcrun_container_get_features' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (15) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (16) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (19) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3961:30: note: (22) returning to 'libcrun_container_get_features' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (23) 'xstrdup("1.1.0+dev")' leaks here; was allocated at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'retrieve_mount_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(*<unknown>.name)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3924:1: note: (1) entry to 'retrieve_mount_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (2) calling 'xmalloc0' from 'retrieve_mount_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3937:28: note: (6) returning to 'retrieve_mount_options' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3940:24: note: (7) following 'true' branch (when 'num_mount_options > i')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:60: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:33: note: (9) calling 'xstrdup' from 'retrieve_mount_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (10) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (11) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (13) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (14) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (15) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3941:33: note: (17) returning to 'retrieve_mount_options' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (18) 'xstrdup(*<unknown>.name)' leaks here; was allocated at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(*_70->process.selinux_label)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:10: note: (52) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (54) calling 'xstrdup' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (62) returning to 'libcrun_container_exec_with_options' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (63) 'xstrdup(*_70->process.selinux_label)' leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(*_75->process.apparmor_profile)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3600:10: note: (52) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (54) calling 'xstrdup' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (62) returning to 'libcrun_container_exec_with_options' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (63) 'xstrdup(*_75->process.apparmor_profile)' leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_load_from_file': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: warning: leak of '<unknown>' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4120:1: note: (1) entry to 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4132:15: note: (2) calling 'libcrun_container_load_from_file' from 'libcrun_container_restore' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (3) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (6) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (7) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (8) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (9) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (12) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:532:6: note: (13) following 'true' branch (when 'path' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (15) calling 'xstrdup' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (16) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (17) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (20) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (21) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:533:30: note: (23) returning to 'make_container' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (24) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (26) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (27) '<unknown>' leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'container_delete_internal': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:15: warning: dereference of NULL 'container' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4088:1: note: (1) entry to 'libcrun_container_checkpoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4094:42: note: (2) 'container' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4094:42: note: (3) 'container' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4097:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4100:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4101:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4103:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4103:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4106:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4107:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4109:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4109:9: note: (12) 'container' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4110:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4113:20: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4113:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4114:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:4114:12: note: (17) calling 'container_delete_internal' from 'libcrun_container_checkpoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1643:1: note: (18) entry to 'container_delete_internal' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1648:42: note: (19) 'container' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1653:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1667:19: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1669:6: note: (22) following 'true' branch (when 'force != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1687:15: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1687:6: note: (24) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1689:10: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1689:10: note: (26) following 'true' branch (when 'def' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1691:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1692:14: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:26: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:26: note: (30) 'container' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1695:15: note: (31) dereference of NULL 'container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'exec_process_entrypoint': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: warning: double 'close' of file descriptor 'pipefd1' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3233:1: note: (1) entry to 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3266:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3269:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3270:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3273:14: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3302:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3305:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3306:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:16: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3309:6: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3311:21: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3334:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3337:16: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3359:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (16) calling 'maybe_chown_std_streams' from 'exec_process_entrypoint' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1000:1: note: (17) entry to 'maybe_chown_std_streams' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1005:17: note: (18) following 'true' branch (when 'i != 3')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:13: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:13: note: (20) when 'isatty' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1007:10: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:1005:23: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3362:9: note: (23) returning to 'exec_process_entrypoint' from 'maybe_chown_std_streams' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3363:6: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3366:14: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3372:6: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3375:6: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: note: (28) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:3: note: (29) following 'true' branch... <--[gcc] cc1: note: (30) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3414:23: note: (31) second 'close' here; first 'close' was at (28) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: warning: dereference of NULL 'process' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3211:1: note: (1) entry to 'libcrun_container_exec_process_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3219:10: note: (2) calling 'libcrun_container_exec_with_options' from 'libcrun_container_exec_process_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (3) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (4) 'process' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (5) 'process' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3473:46: note: (6) 'process' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (15) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (16) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (19) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (20) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (21) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (22) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (25) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (26) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (28) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (29) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (35) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (37) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (42) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (44) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (45) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:6: note: (46) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:29: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (50) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (52) dereference of NULL 'process' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:32: warning: leak of '*process.selinux_label' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:10: note: (52) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (54) calling 'xstrdup' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:34: note: (62) returning to 'libcrun_container_exec_with_options' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3598:32: note: (63) '*process.selinux_label' leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:35: warning: leak of '*process.apparmor_profile' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (48) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (49) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3595:6: note: (50) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3597:18: note: (51) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3600:10: note: (52) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (53) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (54) calling 'xstrdup' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (55) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (56) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (57) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (58) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (59) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (61) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:37: note: (62) returning to 'libcrun_container_exec_with_options' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3601:35: note: (63) '*process.apparmor_profile' leaks here; was allocated at (58) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: warning: double 'close' of file descriptor 'pipefd0' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (48) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (49) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (50) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (51) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (52) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (53) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (55) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (56) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (57) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (58) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (59) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (60) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (61) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (62) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (64) following 'true' branch... <--[gcc] cc1: note: (65) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: note: (66) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:7: note: (67) following 'true' branch... <--[gcc] cc1: note: (68) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3620:27: note: (69) second 'close' here; first 'close' was at (66) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: warning: double 'close' of file descriptor 'pipefd1' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3449:1: note: (1) entry to 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3478:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3481:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3482:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3486:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3487:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3490:9: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3491:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (10) calling 'libcrun_container_load_from_file' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:555:1: note: (11) entry to 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:560:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (14) calling 'make_container' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:524:1: note: (15) entry to 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (16) calling 'xmalloc0' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (17) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:526:36: note: (20) returning to 'make_container' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:534:6: note: (21) following 'false' branch (when 'config' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:537:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:565:10: note: (23) returning to 'libcrun_container_load_from_file' from 'make_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3494:15: note: (24) returning to 'libcrun_container_exec_with_options' from 'libcrun_container_load_from_file' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3495:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3498:22: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3500:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3506:21: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3509:8: note: (29) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3504:57: note: (30) inlined call to 'cgroup_status_freep' from 'libcrun_container_exec_with_options' <--[gcc] In function 'cgroup_status_freep', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3504:57: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/cgroup.h:78:6: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3513:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3516:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3521:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3524:9: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3525:6: note: (36) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3528:3: note: (37) inlined call to 'libcrun_seccomp_gen_ctx_init' from 'libcrun_container_exec_with_options' <--[gcc] In function 'libcrun_seccomp_gen_ctx_init', inlined from 'libcrun_container_exec_with_options' at src/libcrun/container.c:3528:3: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:52:3: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c: In function 'libcrun_container_exec_with_options': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3531:6: note: (39) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3534:18: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3543:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:11: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3546:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3583:9: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3584:6: note: (45) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (46) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (47) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3587:9: note: (48) when 'pipe2' succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3588:6: note: (49) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3590:33: note: (50) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (51) calling 'initialize_security' from 'libcrun_container_exec_with_options' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:623:1: note: (52) entry to 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:627:6: note: (53) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:630:11: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:638:6: note: (55) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:641:9: note: (56) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3604:9: note: (57) returning to 'libcrun_container_exec_with_options' from 'initialize_security' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3605:6: note: (58) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3608:9: note: (59) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3609:6: note: (60) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3613:47: note: (61) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3614:6: note: (62) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (63) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3618:6: note: (64) following 'false' branch... <--[gcc] cc1: note: (65) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: note: (66) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:3: note: (67) following 'true' branch... <--[gcc] cc1: note: (68) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.c:3631:23: note: (69) second 'close' here; first 'close' was at (66) <--[gcc] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-krun.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-krun.Tpo -c -o src/libcrun/handlers/libcrun_la-krun.lo `test -f 'src/libcrun/handlers/krun.c' || echo './'`src/libcrun/handlers/krun.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-krun.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-krun.Tpo -c src/libcrun/handlers/krun.c -o src/libcrun/handlers/libcrun_la-krun.o mv -f src/libcrun/handlers/.deps/libcrun_la-krun.Tpo src/libcrun/handlers/.deps/libcrun_la-krun.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-criu.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-criu.Tpo -c -o src/libcrun/libcrun_la-criu.lo `test -f 'src/libcrun/criu.c' || echo './'`src/libcrun/criu.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-criu.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-criu.Tpo -c src/libcrun/criu.c -o src/libcrun/libcrun_la-criu.o mv -f src/libcrun/.deps/libcrun_la-criu.Tpo src/libcrun/.deps/libcrun_la-criu.Plo /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function 'libkrun_load': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:18: warning: Although the value stored to 'rootfsfd_cleanup' is used in the enclosing expression, the value is never actually read from 'rootfsfd_cleanup' [deadcode.DeadStores] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:7: warning: Branch condition evaluates to a garbage value [core.uninitialized.Branch] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:262:9: warning: unused variable 'handle' [-Wunused-variable] <--[gcc] 262 | void *handle; | ^~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function 'libkrun_configure_container': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: warning: 'create_sev' may be used uninitialized [-Wmaybe-uninitialized] <--[gcc] 248 | if (create_sev) | ^ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: 'create_sev' was declared here <--[gcc] 180 | bool create_sev; | ^~~~~~~~~~ from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.h:22, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'rootfsfd_cleanup' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:167:1: note: (1) entry to 'libkrun_configure_container' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:182:6: note: (2) following 'false' branch (when 'rootfs' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (4) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:187:10: note: (5) assuming 'rootfsfd_cleanup' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:187:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:191:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:177:21: note: (8) inlined call to 'cleanup_closep' from 'libkrun_configure_container' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/custom-handler.h:23: <--[gcc] In function 'cleanup_closep', inlined from 'libkrun_configure_container' at src/libcrun/handlers/krun.c:177:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (9) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:177:21: note: (11) inlined call to 'cleanup_closep' from 'libkrun_configure_container' <--[gcc] In function 'cleanup_closep', inlined from 'libkrun_configure_container' at src/libcrun/handlers/krun.c:177:21: cc1: note: (12) calling 'cleanup_closep.part.0' from 'libkrun_configure_container' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (13) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (14) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (15) following 'true' branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) second 'close' here; first 'close' was at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c: In function 'libkrun_configure_container': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: warning: leak of file descriptor 'open(rootfs, 2621440)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:182:6: note: (1) following 'false' branch (when 'rootfs' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:186:37: note: (4) 'open(rootfs, 2621440)' leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: warning: use of uninitialized value 'create_sev' [CWE-457] [-Wanalyzer-use-of-uninitialized-value] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: (1) region created on stack here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:180:8: note: (2) capacity: 1 byte <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:191:6: note: (3) following 'false' branch (when 'phase != 1')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:215:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:215:6: note: (5) following 'false' branch (when 'phase == 2')... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:225:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:235:11: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:236:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:239:9: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:240:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:242:14: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:245:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/krun.c:248:6: note: (15) use of uninitialized value 'create_sev' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:131:12: warning: Potential leak of memory pointed to by 'wrapper' [unix.Malloc] <--[clang] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'console_socket_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:181:1: note: (1) entry to 'criu_notify' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:183:6: note: (2) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:193:10: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:196:34: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:199:10: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:204:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:205:10: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (9) inlined call to 'cleanup_closep' from 'criu_notify' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:35: <--[gcc] In function 'cleanup_closep', inlined from 'criu_notify' at src/libcrun/criu.c:188:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (11) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (12) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:188:25: note: (13) inlined call to 'cleanup_closep' from 'criu_notify' <--[gcc] In function 'cleanup_closep', inlined from 'criu_notify' at src/libcrun/criu.c:188:25: cc1: note: (14) calling 'cleanup_closep.part.0' from 'criu_notify' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (15) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (16) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (17) following 'true' branch... <--[gcc] cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (19) second 'close' here; first 'close' was at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'image_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling 'load_wrapper' from 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to 'libcrun_container_checkpoint_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (21) assuming 'image_fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:442:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:490:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:511:9: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:394:21: note: (26) inlined call to 'cleanup_closep' from 'libcrun_container_checkpoint_linux_criu' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_checkpoint_linux_criu' at src/libcrun/criu.c:394:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (27) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:394:21: note: (29) inlined call to 'cleanup_closep' from 'libcrun_container_checkpoint_linux_criu' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_checkpoint_linux_criu' at src/libcrun/criu.c:394:21: cc1: note: (30) calling 'cleanup_closep.part.0' from 'libcrun_container_checkpoint_linux_criu' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (31) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (32) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (33) following 'true' branch... <--[gcc] cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (35) second 'close' here; first 'close' was at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'image_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (21) assuming 'image_fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (28) following 'false' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/json_common.h:9, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src/ocispec/runtime_spec_schema_config_schema.h:7, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/container.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:32: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (30) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:739:21: note: (31) inlined call to 'cleanup_closep' from 'libcrun_container_restore_linux_criu' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_restore_linux_criu' at src/libcrun/criu.c:739:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:736:21: note: (33) inlined call to 'cleanup_closep' from 'libcrun_container_restore_linux_criu' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_restore_linux_criu' at src/libcrun/criu.c:736:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (34) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:736:21: note: (36) inlined call to 'cleanup_closep' from 'libcrun_container_restore_linux_criu' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_restore_linux_criu' at src/libcrun/criu.c:736:21: cc1: note: (37) calling 'cleanup_closep.part.0' from 'libcrun_container_restore_linux_criu' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (38) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (39) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (40) following 'true' branch... <--[gcc] cc1: note: (41) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (42) second 'close' here; first 'close' was at (39) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'root_fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:654:1: note: (1) entry to 'prepare_restore_mounts' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:659:17: note: (2) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:661:23: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:669:10: note: (4) following 'false' branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:674:21: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:676:30: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:704:10: note: (9) assuming 'root_fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:704:10: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:707:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:712:14: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:663:25: note: (13) inlined call to 'cleanup_closep' from 'prepare_restore_mounts' <--[gcc] In function 'cleanup_closep', inlined from 'prepare_restore_mounts' at src/libcrun/criu.c:663:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (15) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:663:25: note: (17) inlined call to 'cleanup_closep' from 'prepare_restore_mounts' <--[gcc] In function 'cleanup_closep', inlined from 'prepare_restore_mounts' at src/libcrun/criu.c:663:25: cc1: note: (18) calling 'cleanup_closep.part.0' from 'prepare_restore_mounts' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (19) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (20) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (21) following 'true' branch... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (23) second 'close' here; first 'close' was at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_container_restore_linux_criu': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(*status.bundle)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:854:6: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:37: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:22: note: (30) calling 'xstrdup' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (34) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (35) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (36) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:855:22: note: (38) returning to 'libcrun_container_restore_linux_criu' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (39) 'xstrdup(*status.bundle)' leaks here; was allocated at (34) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'restore_cgroup_v1_mount': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:294:22: warning: dereference of NULL '0' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:249:22: note: (1) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:251:9: note: (2) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:258:6: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (5) following 'false' branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:274:6: note: (7) following 'true' branch (when 'has_cgroup_mount != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:277:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:278:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:25: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:51: note: (13) following 'true' branch (when 'from' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (15) 'destination' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:287:26: note: (16) 'destination' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:292:19: note: (17) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:293:17: note: (18) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:294:22: note: (19) dereference of NULL 'strchr(subsystem, 58)' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:296:20: warning: dereference of NULL '0' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:249:22: note: (1) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:251:9: note: (2) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:258:6: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:261:6: note: (5) following 'false' branch... <--[gcc] cc1: note: (6) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:274:6: note: (7) following 'true' branch (when 'has_cgroup_mount != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:277:9: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:278:6: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:25: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:281:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:284:51: note: (13) following 'true' branch (when 'from' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:286:26: note: (15) 'destination' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:287:26: note: (16) 'destination' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:292:19: note: (17) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:293:17: note: (18) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:296:20: note: (19) dereference of NULL 'strchr(from, 58)' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'checkpoint_cgroup_v1_mount': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:361:22: warning: dereference of NULL '0' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:325:22: note: (1) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:327:9: note: (2) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:342:6: note: (3) following 'true' branch (when 'has_cgroup_mount != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:345:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:346:6: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:15: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:51: note: (9) following 'true' branch (when 'from' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (11) 'source_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:359:19: note: (12) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:360:17: note: (13) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:361:22: note: (14) dereference of NULL 'strchr(subsystem, 58)' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:363:20: warning: dereference of NULL '0' [CWE-476] [-Wanalyzer-null-dereference] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:325:22: note: (1) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:327:9: note: (2) 'content' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:342:6: note: (3) following 'true' branch (when 'has_cgroup_mount != 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:345:9: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:346:6: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:25: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:349:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:15: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:352:51: note: (9) following 'true' branch (when 'from' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:354:26: note: (11) 'source_path' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:359:19: note: (12) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:360:17: note: (13) when 'strchr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:363:20: note: (14) dereference of NULL 'strchr(from, 58)' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'libcrun_container_checkpoint_linux_criu': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: warning: leak of file descriptor 'open(*cr_options.image_path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling 'load_wrapper' from 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to 'libcrun_container_checkpoint_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:438:14: note: (21) 'open(*cr_options.image_path, 589824)' leaks here; was opened at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: warning: leak of file descriptor 'open(*cr_options.work_path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:386:1: note: (1) entry to 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (2) calling 'load_wrapper' from 'libcrun_container_checkpoint_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:400:9: note: (9) returning to 'libcrun_container_checkpoint_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:401:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:404:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:424:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:425:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:428:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:431:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:434:9: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:439:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:442:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:456:6: note: (22) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (24) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:458:17: note: (25) 'open(*cr_options.work_path, 589824)' leaks here; was opened at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'prepare_restore_mounts': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: warning: leak of file descriptor 'open(root, 524288)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:659:17: note: (1) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:661:23: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:669:10: note: (3) following 'false' branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:674:21: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:676:30: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:703:17: note: (8) 'open(root, 524288)' leaks here; was opened at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c: In function 'libcrun_container_restore_linux_criu': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: warning: leak of file descriptor 'open(*cr_options.image_path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (20) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (21) 'open(*cr_options.image_path, 589824)' leaks here; was opened at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: warning: leak of file descriptor 'open(*cr_options.work_path, 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:815:6: note: (28) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (30) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:817:17: note: (31) 'open(*cr_options.work_path, 589824)' leaks here; was opened at (30) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: warning: leak of file descriptor 'open(**_134.path, 0)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:862:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:863:6: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:866:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:867:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:880:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:881:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:884:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:885:6: note: (36) following 'false' branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:897:17: note: (38) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:900:53: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:901:10: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (44) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:906:32: note: (45) 'open(**_134.path, 0)' leaks here; was opened at (44) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: warning: leak of file descriptor 'open(**_151.path, 0)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:729:1: note: (1) entry to 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (2) calling 'load_wrapper' from 'libcrun_container_restore_linux_criu' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:114:1: note: (3) entry to 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (4) calling 'xmalloc0' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (5) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:116:52: note: (8) returning to 'load_wrapper' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:744:9: note: (9) returning to 'libcrun_container_restore_linux_criu' from 'load_wrapper' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:745:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:748:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:751:24: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:752:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:24: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:755:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:27: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:758:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:761:14: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:762:6: note: (20) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:765:18: note: (21) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:775:8: note: (22) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:778:11: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:779:8: note: (24) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:788:12: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:789:8: note: (26) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:792:17: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:859:6: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:862:9: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:863:6: note: (30) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:866:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:867:6: note: (32) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:880:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:881:6: note: (34) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:884:24: note: (35) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:885:6: note: (36) following 'false' branch... <--[gcc] cc1: note: (37) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:897:17: note: (38) following 'true' branch... <--[gcc] /builddir/build/BUILDmake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-ebpf.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-ebpf.Tpo -c -o src/libcrun/libcrun_la-ebpf.lo `test -f 'src/libcrun/ebpf.c' || echo './'`src/libcrun/ebpf.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-ebpf.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-ebpf.Tpo -c src/libcrun/ebpf.c -o src/libcrun/libcrun_la-ebpf.o mv -f src/libcrun/.deps/libcrun_la-ebpf.Tpo src/libcrun/.deps/libcrun_la-ebpf.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-io_priority.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-io_priority.Tpo -c -o src/libcrun/libcrun_la-io_priority.lo `test -f 'src/libcrun/io_priority.c' || echo './'`src/libcrun/io_priority.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-io_priority.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-io_priority.Tpo -c src/libcrun/io_priority.c -o src/libcrun/libcrun_la-io_priority.o mv -f src/libcrun/.deps/libcrun_la-io_priority.Tpo src/libcrun/.deps/libcrun_la-io_priority.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmer.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmer.Tpo -c -o src/libcrun/handlers/libcrun_la-wasmer.lo `test -f 'src/libcrun/handlers/wasmer.c' || echo './'`src/libcrun/handlers/wasmer.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmer.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmer.Tpo -c src/libcrun/handlers/wasmer.c -o src/libcrun/handlers/libcrun_la-wasmer.o mv -f src/libcrun/handlers/.deps/libcrun_la-wasmer.Tpo src/libcrun/handlers/.deps/libcrun_la-wasmer.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-mount_flags.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-mount_flags.Tpo -c -o src/libcrun/libcrun_la-mount_flags.lo `test -f 'src/libcrun/mount_flags.c' || echo './'`src/libcrun/mount_flags.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-mount_flags.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-mount_flags.Tpo -c src/libcrun/mount_flags.c -o src/libcrun/libcrun_la-mount_flags.o mv -f src/libcrun/.deps/libcrun_la-mount_flags.Tpo src/libcrun/.deps/libcrun_la-mount_flags.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmedge.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmedge.Tpo -c -o src/libcrun/handlers/libcrun_la-wasmedge.lo `test -f 'src/libcrun/handlers/wasmedge.c' || echo './'`src/libcrun/handlers/wasmedge.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmedge.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmedge.Tpo -c src/libcrun/handlers/wasmedge.c -o src/libcrun/handlers/libcrun_la-wasmedge.o mv -f src/libcrun/handlers/.deps/libcrun_la-wasmedge.Tpo src/libcrun/handlers/.deps/libcrun_la-wasmedge.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-spin.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-spin.Tpo -c -o src/libcrun/handlers/libcrun_la-spin.lo `test -f 'src/libcrun/handlers/spin.c' || echo './'`src/libcrun/handlers/spin.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-spin.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-spin.Tpo -c src/libcrun/handlers/spin.c -o src/libcrun/handlers/libcrun_la-spin.o mv -f src/libcrun/handlers/.deps/libcrun_la-spin.Tpo src/libcrun/handlers/.deps/libcrun_la-spin.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmtime.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmtime.Tpo -c -o src/libcrun/handlers/libcrun_la-wasmtime.lo `test -f 'src/libcrun/handlers/wasmtime.c' || echo './'`src/libcrun/handlers/wasmtime.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/handlers/libcrun_la-wasmtime.lo -MD -MP -MF src/libcrun/handlers/.deps/libcrun_la-wasmtime.Tpo -c src/libcrun/handlers/wasmtime.c -o src/libcrun/handlers/libcrun_la-wasmtime.o mv -f src/libcrun/handlers/.deps/libcrun_la-wasmtime.Tpo src/libcrun/handlers/.deps/libcrun_la-wasmtime.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-scheduler.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-scheduler.Tpo -c -o src/libcrun/libcrun_la-scheduler.lo `test -f 'src/libcrun/scheduler.c' || echo './'`src/libcrun/scheduler.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-scheduler.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-scheduler.Tpo -c src/libcrun/scheduler.c -o src/libcrun/libcrun_la-scheduler.o mv -f src/libcrun/.deps/libcrun_la-scheduler.Tpo src/libcrun/.deps/libcrun_la-scheduler.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-terminal.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-terminal.Tpo -c -o src/libcrun/libcrun_la-terminal.lo `test -f 'src/libcrun/terminal.c' || echo './'`src/libcrun/terminal.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-terminal.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-terminal.Tpo -c src/libcrun/terminal.c -o src/libcrun/libcrun_la-terminal.o mv -f src/libcrun/.deps/libcrun_la-terminal.Tpo src/libcrun/.deps/libcrun_la-terminal.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-signals.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-signals.Tpo -c -o src/libcrun/libcrun_la-signals.lo `test -f 'src/libcrun/signals.c' || echo './'`src/libcrun/signals.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-signals.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-signals.Tpo -c src/libcrun/signals.c -o src/libcrun/libcrun_la-signals.o mv -f src/libcrun/.deps/libcrun_la-signals.Tpo src/libcrun/.deps/libcrun_la-signals.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' depbase=`echo tests/init.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/init.o -MD -MP -MF $depbase.Tpo -c -o tests/init.o tests/init.c &&\ mv -f $depbase.Tpo $depbase.Po make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-seccomp_notify.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-seccomp_notify.Tpo -c -o src/libcrun/libcrun_la-seccomp_notify.lo `test -f 'src/libcrun/seccomp_notify.c' || echo './'`src/libcrun/seccomp_notify.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-seccomp_notify.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-seccomp_notify.Tpo -c src/libcrun/seccomp_notify.c -o src/libcrun/libcrun_la-seccomp_notify.o mv -f src/libcrun/.deps/libcrun_la-seccomp_notify.Tpo src/libcrun/.deps/libcrun_la-seccomp_notify.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' rm -f libcrun_testing.a ar cru libcrun_testing.a src/libcrun/libcrun_testing_a-utils.o src/libcrun/blake3/libcrun_testing_a-blake3.o src/libcrun/blake3/libcrun_testing_a-blake3_portable.o src/libcrun/libcrun_testing_a-cgroup-cgroupfs.o src/libcrun/libcrun_testing_a-cgroup-resources.o src/libcrun/libcrun_testing_a-cgroup-setup.o src/libcrun/libcrun_testing_a-cgroup-systemd.o src/libcrun/libcrun_testing_a-cgroup-utils.o src/libcrun/libcrun_testing_a-cgroup.o src/libcrun/libcrun_testing_a-chroot_realpath.o src/libcrun/libcrun_testing_a-cloned_binary.o src/libcrun/libcrun_testing_a-container.o src/libcrun/libcrun_testing_a-criu.o src/libcrun/libcrun_testing_a-custom-handler.o src/libcrun/libcrun_testing_a-ebpf.o src/libcrun/libcrun_testing_a-error.o src/libcrun/handlers/libcrun_testing_a-handler-utils.o src/libcrun/handlers/libcrun_testing_a-krun.o src/libcrun/handlers/libcrun_testing_a-mono.o src/libcrun/handlers/libcrun_testing_a-spin.o src/libcrun/handlers/libcrun_testing_a-wasmedge.o src/libcrun/handlers/libcrun_testing_a-wasmer.o src/libcrun/handlers/libcrun_testing_a-wasmtime.o src/libcrun/libcrun_testing_a-intelrdt.o src/libcrun/libcrun_testing_a-io_priority.o src/libcrun/libcrun_testing_a-linux.o src/libcrun/libcrun_testing_a-mount_flags.o src/libcrun/libcrun_testing_a-scheduler.o src/libcrun/libcrun_testing_a-seccomp.o src/libcrun/libcrun_testing_a-seccomp_notify.o src/libcrun/libcrun_testing_a-signals.o src/libcrun/libcrun_testing_a-status.o src/libcrun/libcrun_testing_a-terminal.o libocispec/libocispec.la ranlib libcrun_testing.a make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-status.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-status.Tpo -c -o src/libcrun/libcrun_la-status.lo `test -f 'src/libcrun/status.c' || echo './'`src/libcrun/status.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-status.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-status.Tpo -c src/libcrun/status.c -o src/libcrun/libcrun_la-status.o mv -f src/libcrun/.deps/libcrun_la-status.Tpo src/libcrun/.deps/libcrun_la-status.Plo /crun-1.15-build/crun-1.15/src/libcrun/criu.c:900:53: note: (39) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:901:10: note: (40) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:904:10: note: (41) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:913:10: note: (42) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (43) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (44) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/criu.c:915:32: note: (45) 'open(**_151.path, 0)' leaks here; was opened at (44) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'read_all_progs': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of 'xrealloc(progs, cur_size * 4)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to 'ebpf_attach_program' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:387:13: note: (2) calling 'read_all_progs' from 'ebpf_attach_program' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (3) entry to 'read_all_progs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:282:32: note: (4) following 'true' branch (when 'cur_size <= 4096')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (6) calling 'xrealloc' from 'read_all_progs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (7) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (8) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (9) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (12) returning to 'read_all_progs' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (13) 'xrealloc(progs, cur_size * 4)' leaks here; was allocated at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_ebpf_load': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of 'xrealloc(log, log_size)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:475:1: note: (1) entry to 'libcrun_ebpf_load' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:504:6: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (4) calling 'xrealloc' from 'libcrun_ebpf_load' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (7) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (10) returning to 'libcrun_ebpf_load' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (11) 'xrealloc(log, log_size)' leaks here; was allocated at (6) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In function 'cleanup_freep', inlined from 'read_all_progs' at src/libcrun/ebpf.c:275:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-'free' of 'progs' [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function 'read_all_progs': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to 'ebpf_attach_program' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:381:30: note: (2) first 'free' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:387:13: note: (3) calling 'read_all_progs' from 'ebpf_attach_program' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (4) entry to 'read_all_progs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:282:32: note: (5) following 'true' branch (when 'cur_size <= 4096')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (7) passing freed pointer 'progs' in call to 'xrealloc' from 'read_all_progs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (8) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (9) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:284:15: note: (12) returning to 'read_all_progs' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:275:26: note: (13) inlined call to 'cleanup_freep' from 'read_all_progs' <--[gcc] In function 'cleanup_freep', inlined from 'read_all_progs' at src/libcrun/ebpf.c:275:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (14) second 'free' here; first 'free' was at (2) <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_ebpf_load' at src/libcrun/ebpf.c:507:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-'free' of 'log' [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function 'libcrun_ebpf_load': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:475:1: note: (1) entry to 'libcrun_ebpf_load' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:504:6: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (4) passing freed pointer 'log' in call to 'xrealloc' from 'libcrun_ebpf_load' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:511:13: note: (9) returning to 'libcrun_ebpf_load' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:507:26: note: (10) inlined call to 'cleanup_freep' from 'libcrun_ebpf_load' <--[gcc] In function 'cleanup_freep', inlined from 'libcrun_ebpf_load' at src/libcrun/ebpf.c:507:26: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (11) second 'free' here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c: In function 'read_all_progs': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: warning: infinite loop [CWE-835] [-Wanalyzer-infinite-loop] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:363:1: note: (1) entry to 'ebpf_attach_program' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:272:1: note: (2) entry to 'read_all_progs' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (3) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (4) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (5) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (6) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (7) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (8) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (9) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (10) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (11) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (12) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (15) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (16) when 'realloc' succeeds, without moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (17) infinite loop here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (18) when 'ret < 0': always following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.h:25: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:21: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (20) if it ever follows 'true' branch, it will always do so... <--[gcc] cc1: note: (21) ...to here cc1: note: (22) looping back... /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/ebpf.c:294:18: note: (23) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/io_priority.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmer.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/mount_flags.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmedge.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/spin.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/handlers/wasmtime.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/scheduler.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:59:3: warning: Value stored to 'fd' is never read [deadcode.DeadStores] <--[clang] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:40:1: note: (1) entry to 'libcrun_new_terminal' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:26: note: (2) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (3) assuming 'fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:48:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:21: note: (6) inlined call to 'cleanup_closep' from 'libcrun_new_terminal' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:25: <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_new_terminal' at src/libcrun/terminal.c:44:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (7) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (8) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:44:21: note: (9) inlined call to 'cleanup_closep' from 'libcrun_new_terminal' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_new_terminal' at src/libcrun/terminal.c:44:21: cc1: note: (10) calling 'cleanup_closep.part.0' from 'libcrun_new_terminal' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (11) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (12) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (13) following 'true' branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (15) second 'close' here; first 'close' was at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:95:1: note: (1) entry to 'libcrun_set_stdio' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:26: note: (2) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (3) assuming 'fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (4) following 'false' branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (6) following 'true' branch (when 'i != 3')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (8) inlined call to 'cleanup_closep' from 'libcrun_set_stdio' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_set_stdio' at src/libcrun/terminal.c:98:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (9) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (11) inlined call to 'cleanup_closep' from 'libcrun_set_stdio' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_set_stdio' at src/libcrun/terminal.c:98:21: cc1: note: (12) calling 'cleanup_closep.part.0' from 'libcrun_set_stdio' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (13) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (14) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (15) following 'true' branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) second 'close' here; first 'close' was at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_set_stdio': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:106:1: warning: leak of file descriptor 'ret' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:95:1: note: (1) entry to 'libcrun_set_stdio' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:100:6: note: (2) following 'false' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (4) following 'true' branch (when 'i != 3')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (7) assuming 'ret' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:23: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:17: note: (10) following 'true' branch (when 'i != 3')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:105:13: note: (12) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (13) assuming 'ret' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:106:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:103:23: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:98:21: note: (16) inlined call to 'cleanup_closep' from 'libcrun_set_stdio' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_set_stdio' at src/libcrun/terminal.c:98:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (17) following 'true' branch... <--[gcc] In function 'libcrun_set_stdio': cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:106:1: note: (19) 'ret' leaks here; was opened at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_new_terminal': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(&buf)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:40:1: note: (1) entry to 'libcrun_new_terminal' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:45:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:48:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:49:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:52:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:53:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (8) calling 'xstrdup' from 'libcrun_new_terminal' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (9) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (10) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (12) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (13) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (14) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (15) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/terminal.c:56:10: note: (16) returning to 'libcrun_new_terminal' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (17) 'xstrdup(&buf)' leaks here; was allocated at (12) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/signals.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘main’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘write_to’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:305:3: warning: ‘strncpy’ specified bound 108 equals destination size [-Wstringop-truncation] <--[gcc] 305 | strncpy (notify_socket_unix_name.sun_path, notify_socket_name, | ^ /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:6: warning: leak of file descriptor ‘open(path, 1)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:161:12: note: (1) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:162:6: note: (2) assuming ‘open(path, 1)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:162:6: note: (3) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:7: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:6: note: (5) ‘open(path, 1)’ leaks here; was opened at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘check_idmapped_mounts’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:209:6: warning: leak of file descriptor ‘open(&proc_path, 0)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:176:1: note: (1) entry to ‘check_idmapped_mounts’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:187:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:189:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:189:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:197:3: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:198:3: note: (6) calling ‘write_to’ from ‘check_idmapped_mounts’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:159:1: note: (7) entry to ‘write_to’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:162:6: note: (8) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:7: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:6: note: (10) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:167:7: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:167:6: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:169:1: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:198:3: note: (14) returning to ‘check_idmapped_mounts’ from ‘write_to’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:200:3: note: (15) calling ‘write_to’ from ‘check_idmapped_mounts’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:159:1: note: (16) entry to ‘write_to’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:162:6: note: (17) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:7: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:165:6: note: (19) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:167:7: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:167:6: note: (21) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:169:1: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:200:3: note: (23) returning to ‘check_idmapped_mounts’ from ‘write_to’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:203:8: note: (24) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:204:6: note: (25) assuming ‘open(&proc_path, 0)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:204:6: note: (26) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:207:18: note: (27) inlined call to ‘syscall_open_tree’ from ‘check_idmapped_mounts’ <--[gcc] In function ‘syscall_open_tree’, inlined from ‘check_idmapped_mounts’ at tests/init.c:207:18: /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:132:16: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘check_idmapped_mounts’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:209:6: note: (29) ‘open(&proc_path, 0)’ leaks here; was opened at (24) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘cat’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: warning: leak of FILE ‘fopen(file, "rbe")’ [CWE-775] [-Wanalyzer-file-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:224:13: note: (1) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:226:6: note: (2) assuming ‘fopen(file, "rbe")’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:226:6: note: (3) following ‘false’ branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:231:10: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: note: (7) ‘fopen(file, "rbe")’ leaks here; was opened at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: warning: leak of ‘fopen(file, "rbe")’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:224:13: note: (1) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:226:6: note: (2) assuming ‘fopen(file, "rbe")’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:226:6: note: (3) following ‘false’ branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:231:10: note: (5) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:241:11: note: (7) ‘fopen(file, "rbe")’ leaks here; was allocated at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c: In function ‘main’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:582:10: warning: leak of file descriptor ‘open(&path, 1)’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:380:6: note: (1) following ‘false’ branch (when ‘argc > 1’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:383:7: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:383:6: note: (3) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:388:7: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:388:6: note: (5) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:396:7: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:396:6: note: (7) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:404:7: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:404:6: note: (9) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:417:7: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:417:6: note: (11) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:424:7: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:424:6: note: (13) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:441:7: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:441:6: note: (15) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:448:7: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:448:6: note: (17) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:458:7: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:458:6: note: (19) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:471:7: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:471:6: note: (21) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:484:7: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:484:6: note: (23) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:494:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:494:6: note: (25) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:507:7: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:507:6: note: (27) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:521:7: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:521:6: note: (29) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:535:7: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:535:6: note: (31) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:545:7: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:545:6: note: (33) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:552:7: note: (34) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:552:6: note: (35) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:556:7: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:556:6: note: (37) following ‘false’ branch (when the strings are non-equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:562:7: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:562:6: note: (39) following ‘true’ branch (when the strings are equal)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:568:10: note: (40) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:568:10: note: (41) following ‘false’ branch (when ‘argc != 2’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:571:7: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:573:10: note: (43) following ‘false’ branch (when ‘ret >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:576:7: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:578:12: note: (45) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:579:10: note: (46) assuming ‘open(&path, 1)’ is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:579:10: note: (47) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:581:13: note: (48) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/init.c:582:10: note: (49) ‘open(&path, 1)’ leaks here; was opened at (45) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:32: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:105:13: warning: Potential leak of memory pointed to by 'b' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_load_seccomp_notify_plugins': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (11) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (12) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (15) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (16) 'xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif)' leaks here; was allocated at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif_resp)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (16) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (17) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (18) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (19) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (20) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (21) 'xmalloc((long unsigned int)*(struct seccomp_notify_context_s *)<unknown>.sizes.seccomp_notif_resp)' leaks here; was allocated at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: warning: leak of 'xmalloc0(48)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (18) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (19) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:70:15: note: (21) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (22) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (25) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:21: note: (26) 'xmalloc0(48)' leaks here; was allocated at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(plugins)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:83:1: note: (1) entry to 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (2) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (3) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:87:73: note: (6) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:92:6: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:34: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (9) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (10) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:95:15: note: (13) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (14) calling 'xmalloc' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (15) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:96:16: note: (18) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (19) calling 'xmalloc0' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:68:1: note: (20) entry to 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:71:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:73:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:102:18: note: (23) returning to 'libcrun_load_seccomp_notify_plugins' from 'xmalloc0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:104:7: note: (24) calling 'xstrdup' from 'libcrun_load_seccomp_notify_plugins' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (25) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (26) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (27) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (28) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (29) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (30) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (31) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp_notify.c:104:7: note: (32) returning to 'libcrun_load_seccomp_notify_plugins' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) 'xstrdup(plugins)' leaks here; was allocated at (28) <--[gcc] make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -static-libgcc -all-static -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/init tests/init.o libtool: link: gcc -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -static-libgcc -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/init tests/init.o make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_errors tests/tests_libcrun_errors-tests_libcrun_errors.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl libtool: link: gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_errors tests/tests_libcrun_errors-tests_libcrun_errors.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_intelrdt tests/tests_libcrun_intelrdt-tests_libcrun_intelrdt.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl libtool: link: gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_intelrdt tests/tests_libcrun_intelrdt-tests_libcrun_intelrdt.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-intelrdt.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-intelrdt.Tpo -c -o src/libcrun/libcrun_la-intelrdt.lo `test -f 'src/libcrun/intelrdt.c' || echo './'`src/libcrun/intelrdt.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-intelrdt.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-intelrdt.Tpo -c src/libcrun/intelrdt.c -o src/libcrun/libcrun_la-intelrdt.o mv -f src/libcrun/.deps/libcrun_la-intelrdt.Tpo src/libcrun/.deps/libcrun_la-intelrdt.Plo /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:444:7: warning: Potential leak of memory pointed to by 'run_directory' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:515:15: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:546:3: warning: Value stored to 'dfd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:549:12: warning: Potential leak of memory pointed to by 'dir' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:617:10: warning: Potential leak of memory pointed to by 'path' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_container_delete_status': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:556:1: warning: leak of file descriptor 'rundir_dfd' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling 'get_run_directory' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (10) returning to 'libcrun_container_delete_status' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (11) following 'false' branch... <--[gcc] cc1: note: (12) ...to here In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:21: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (13) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:16: note: (14) assuming 'open(get_run_directory(state_root), 589824)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:24, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:537:34: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:528:21: note: (17) inlined call to 'cleanup_closep' from 'libcrun_container_delete_status' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_container_delete_status' at src/libcrun/status.c:528:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (18) following 'false' branch... <--[gcc] In function 'libcrun_container_delete_status': cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:556:1: note: (20) 'rundir_dfd' leaks here; was opened at (13) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_get_containers_list': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(16)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling 'get_run_directory' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to 'libcrun_get_containers_list' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following 'true' branch (when 'next' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling 'xmalloc' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (29) returning to 'libcrun_get_containers_list' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (30) 'xmalloc(16)' leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(16)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling 'get_run_directory' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to 'libcrun_get_containers_list' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following 'true' branch (when 'next' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling 'xmalloc' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (25) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (26) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (27) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (29) returning to 'libcrun_get_containers_list' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (30) calling 'xstrdup' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (31) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (32) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (34) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (36) returning to 'libcrun_get_containers_list' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (37) 'xmalloc(16)' leaks here; was allocated at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:642:1: note: (1) entry to 'libcrun_check_pid_valid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:648:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (4) calling 'read_pid_stat' from 'libcrun_check_pid_valid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:109:1: note: (5) entry to 'read_pid_stat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:120:6: note: (7) assuming 'fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:120:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:131:9: note: (9) inlined call to 'read_all_fd' from 'read_pid_stat' <--[gcc] In function 'read_all_fd', inlined from 'read_pid_stat' at src/libcrun/status.c:131:9: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:303:10: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:112:21: note: (11) inlined call to 'cleanup_closep' from 'read_pid_stat' <--[gcc] In function 'cleanup_closep', inlined from 'read_pid_stat' at src/libcrun/status.c:112:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (12) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (13) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:112:21: note: (14) inlined call to 'cleanup_closep' from 'read_pid_stat' <--[gcc] In function 'cleanup_closep', inlined from 'read_pid_stat' at src/libcrun/status.c:112:21: cc1: note: (15) calling 'cleanup_closep.part.0' from 'read_pid_stat' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (16) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (17) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (20) second 'close' here; first 'close' was at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd_cleanup' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling 'get_run_directory' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (12) returning to 'libcrun_container_delete_status' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (13) following 'false' branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:539:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:540:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (19) calling 'rmdirfd' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (20) entry to 'rmdirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (21) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:471:46: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (22) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (24) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:471:46: cc1: note: (25) calling 'cleanup_closep.part.0' from 'rmdirfd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (26) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (27) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (28) following 'true' branch... <--[gcc] cc1: note: (29) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (30) second 'close' here; first 'close' was at (27) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'cfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling 'get_run_directory' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (12) returning to 'libcrun_container_delete_status' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (13) following 'false' branch... <--[gcc] cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:536:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:539:9: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:540:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:543:9: note: (19) calling 'rmdirfd' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (20) entry to 'rmdirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:474:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:478:14: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:480:26: note: (23) following 'true' branch (when 'de' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:482:22: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:482:10: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:486:13: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:487:10: note: (27) following 'true' branch (when 'ret < 0')... <--[gcc] cc1: note: (28) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:503:14: note: (29) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (30) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:508:18: note: (31) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (32) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (33) calling 'rmdirfd' from 'rmdirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:466:1: note: (34) entry to 'rmdirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:474:6: note: (35) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:475:34: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (37) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:471:46: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (38) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (39) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (40) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:471:46: cc1: note: (41) calling 'cleanup_closep.part.0' from 'rmdirfd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (42) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (43) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:471:46: note: (44) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:471:46: cc1: note: (45) returning to 'rmdirfd' from 'cleanup_closep.part.0' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:469:20: note: (46) inlined call to 'cleanup_dirp' from 'rmdirfd' <--[gcc] In function 'cleanup_dirp', inlined from 'rmdirfd' at src/libcrun/status.c:469:20: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (47) following 'false' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (48) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:511:21: note: (49) returning to 'rmdirfd' from 'rmdirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (50) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:505:33: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (51) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (52) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:505:33: note: (53) inlined call to 'cleanup_closep' from 'rmdirfd' <--[gcc] In function 'cleanup_closep', inlined from 'rmdirfd' at src/libcrun/status.c:505:33: cc1: note: (54) calling 'cleanup_closep.part.0' from 'rmdirfd' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (55) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (56) second 'close' here; first 'close' was at (43) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_get_containers_list': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(&*next.d_name)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling 'get_run_directory' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (10) returning to 'libcrun_get_containers_list' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:583:6: note: (11) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:15: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:586:30: note: (13) following 'true' branch (when 'next' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:589:26: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:593:10: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:596:54: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:597:10: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:600:16: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:601:10: note: (19) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:606:10: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (23) calling 'xmalloc' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (24) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (25) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:612:24: note: (27) returning to 'libcrun_get_containers_list' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (28) calling 'xstrdup' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (29) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (30) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (32) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (33) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (34) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (35) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:613:30: note: (36) returning to 'libcrun_get_containers_list' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (37) 'xstrdup(&*next.d_name)' leaks here; was allocated at (32) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_container_delete_status': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: warning: leak of 'get_run_directory(state_root)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling 'get_run_directory' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'true' branch (when 'state_root' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (6) calling 'xstrdup' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (7) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (8) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (10) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (11) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (12) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (13) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:49:12: note: (14) returning to 'get_run_directory' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:66:9: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (19) returning to 'libcrun_container_delete_status' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (20) 'get_run_directory(state_root)' leaks here; was allocated at (10) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'read_pid_stat': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: warning: leak of file descriptor 'open(&pid_stat_file, 524288)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:642:1: note: (1) entry to 'libcrun_check_pid_valid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:648:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:651:9: note: (4) calling 'read_pid_stat' from 'libcrun_check_pid_valid' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:109:1: note: (5) entry to 'read_pid_stat' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (6) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:119:8: note: (7) 'open(&pid_stat_file, 524288)' leaks here; was opened at (6) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'rmdirfd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: warning: leak of 'fdopendir(fd)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: note: (1) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:473:7: note: (2) 'fdopendir(fd)' leaks here; was allocated at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_container_delete_status': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: warning: leak of file descriptor 'open(get_run_directory(state_root), 589824)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:524:1: note: (1) entry to 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (2) calling 'get_run_directory' from 'libcrun_container_delete_status' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:67:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:69:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:531:9: note: (14) returning to 'libcrun_container_delete_status' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:532:6: note: (15) following 'false' branch... <--[gcc] cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (17) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:535:36: note: (18) 'open(get_run_directory(state_root), 589824)' leaks here; was opened at (17) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_get_containers_list': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: warning: use of NULL where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling 'get_run_directory' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:45:9: note: (4) 'root' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (5) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) 'root' is NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (12) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:58:15: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (14) returning to 'libcrun_get_containers_list' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (15) argument 1 ('get_run_directory(state_root)') NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:27: <--[gcc] /usr/include/dirent.h:141:13: note: argument 1 of 'opendir' must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: warning: leak of 'opendir(get_run_directory(state_root))' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:574:1: note: (1) entry to 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (2) calling 'get_run_directory' from 'libcrun_get_containers_list' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (3) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (4) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:53:10: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:55:17: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:56:14: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:63:12: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:67:6: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:69:10: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:578:29: note: (14) returning to 'libcrun_get_containers_list' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:582:9: note: (16) 'opendir(get_run_directory(state_root))' leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_status_create_exec_fifo': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: warning: leak of file descriptor 'open(fifo_path, 526336)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:677:1: note: (1) entry to 'libcrun_status_create_exec_fifo' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:679:34: note: (2) calling 'libcrun_get_state_directory' from 'libcrun_status_create_exec_fifo' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:73:1: note: (3) entry to 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (4) calling 'get_run_directory' from 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (5) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (6) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (10) returning to 'libcrun_get_state_directory' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:81:6: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:83:7: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:679:34: note: (13) returning to 'libcrun_status_create_exec_fifo' from 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:684:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:687:9: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:688:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (18) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:691:8: note: (19) 'open(fifo_path, 526336)' leaks here; was opened at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c: In function 'libcrun_status_write_exec_fifo': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: warning: leak of file descriptor 'open(fifo_path, 524289)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:699:1: note: (1) entry to 'libcrun_status_write_exec_fifo' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:701:34: note: (2) calling 'libcrun_get_state_directory' from 'libcrun_status_write_exec_fifo' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:73:1: note: (3) entry to 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (4) calling 'get_run_directory' from 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:42:1: note: (5) entry to 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:48:6: note: (6) following 'false' branch (when 'state_root' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:12: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:50:6: note: (8) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:52:33: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:78:29: note: (10) returning to 'libcrun_get_state_directory' from 'get_run_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:81:6: note: (11) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:83:7: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:701:34: note: (13) returning to 'libcrun_status_write_exec_fifo' from 'libcrun_get_state_directory' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:710:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (16) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/status.c:713:8: note: (17) 'open(fifo_path, 524289)' leaks here; was opened at (16) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'resctl_update': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'intelrdt_clean_l3_cache_schema(l3_cache_schema)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:295:1: note: (1) entry to 'resctl_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (6) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (8) when 'strstr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:23: note: (9) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (11) calling 'intelrdt_clean_l3_cache_schema' from 'resctl_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:210:1: note: (12) entry to 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (13) calling 'xmalloc' from 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (14) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (15) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (16) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (19) returning to 'intelrdt_clean_l3_cache_schema' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:49: note: (20) returning to 'resctl_update' from 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (21) 'intelrdt_clean_l3_cache_schema(l3_cache_schema)' leaks here; was allocated at (15) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'resctl_create': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'intelrdt_clean_l3_cache_schema(l3_cache_schema)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when 'strstr' returns non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (15) calling 'intelrdt_clean_l3_cache_schema' from 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:210:1: note: (16) entry to 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (17) calling 'xmalloc' from 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (18) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (19) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (20) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:215:9: note: (23) returning to 'intelrdt_clean_l3_cache_schema' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:49: note: (24) returning to 'resctl_create' from 'intelrdt_clean_l3_cache_schema' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (25) 'intelrdt_clean_l3_cache_schema(l3_cache_schema)' leaks here; was allocated at (19) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'compare_rdt_configurations': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc((n_parts_a + 1) * 8)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when 'strstr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling 'validate_rdt_configuration' from 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following 'true' branch (when 'it' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling 'compare_rdt_configurations' from 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following 'false' branch (when 'n_parts_a == n_parts_b')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling 'xmalloc' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (41) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (42) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (43) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (44) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (45) returning to 'compare_rdt_configurations' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (46) 'xmalloc((n_parts_a + 1) * 8)' leaks here; was allocated at (41) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:22: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'fd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:295:1: note: (1) entry to 'resctl_update' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (6) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:26: note: (8) when 'strstr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:23: note: (9) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (10) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:314:6: note: (12) assuming 'fd' is a valid file descriptor (>= 0) <--[gcc] /builddir/buimake[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-seccomp.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-seccomp.Tpo -c -o src/libcrun/libcrun_la-seccomp.lo `test -f 'src/libcrun/seccomp.c' || echo './'`src/libcrun/seccomp.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-seccomp.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-seccomp.Tpo -c src/libcrun/seccomp.c -o src/libcrun/libcrun_la-seccomp.o mv -f src/libcrun/.deps/libcrun_la-seccomp.Tpo src/libcrun/.deps/libcrun_la-seccomp.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT tests/tests_libcrun_utils-tests_libcrun_utils.o -MD -MP -MF tests/.deps/tests_libcrun_utils-tests_libcrun_utils.Tpo -c -o tests/tests_libcrun_utils-tests_libcrun_utils.o `test -f 'tests/tests_libcrun_utils.c' || echo './'`tests/tests_libcrun_utils.c mv -f tests/.deps/tests_libcrun_utils-tests_libcrun_utils.Tpo tests/.deps/tests_libcrun_utils-tests_libcrun_utils.Po ld/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:314:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:317:9: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:299:21: note: (15) inlined call to 'cleanup_closep' from 'resctl_update' <--[gcc] In function 'cleanup_closep', inlined from 'resctl_update' at src/libcrun/intelrdt.c:299:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (16) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (17) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:299:21: note: (18) inlined call to 'cleanup_closep' from 'resctl_update' <--[gcc] In function 'cleanup_closep', inlined from 'resctl_update' at src/libcrun/intelrdt.c:299:21: cc1: note: (19) calling 'cleanup_closep.part.0' from 'resctl_update' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (20) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (21) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (22) following 'true' branch... <--[gcc] cc1: note: (23) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (24) second 'close' here; first 'close' was at (21) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'compare_rdt_configurations': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(<unknown>)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when 'strstr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling 'validate_rdt_configuration' from 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following 'true' branch (when 'it' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling 'compare_rdt_configurations' from 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following 'false' branch (when 'n_parts_a == n_parts_b')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling 'xmalloc' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (43) returning to 'compare_rdt_configurations' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (44) calling 'xstrdup' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (48) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (49) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (50) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (51) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (52) returning to 'compare_rdt_configurations' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (53) 'xstrdup(<unknown>)' leaks here; was allocated at (48) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: warning: leak of 'xstrdup(<unknown>)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:233:1: note: (1) entry to 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:241:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:243:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:246:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:247:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:250:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:251:6: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:6: note: (10) following 'true' branch (when 'l3_cache_schema' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:26: note: (12) when 'strstr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:254:23: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:43: note: (14) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:259:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:268:6: note: (17) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:269:12: note: (19) calling 'validate_rdt_configuration' from 'resctl_create' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:158:1: note: (20) entry to 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:166:6: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:169:9: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:170:6: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:173:7: note: (24) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:174:10: note: (25) following 'true' branch (when 'it' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (26) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:178:10: note: (27) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (28) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:179:15: note: (29) calling 'compare_rdt_configurations' from 'validate_rdt_configuration' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:98:1: note: (30) entry to 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:108:8: note: (31) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:109:19: note: (32) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (33) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:111:8: note: (34) when 'strchr' returns NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:112:19: note: (35) following 'false' branch (when 'it' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:114:15: note: (36) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:117:6: note: (37) following 'false' branch (when 'n_parts_a == n_parts_b')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:56: note: (38) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (39) calling 'xmalloc' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (40) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (41) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (42) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:120:8: note: (43) returning to 'compare_rdt_configurations' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (44) calling 'xstrdup' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (45) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (46) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (47) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (48) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (49) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:18: note: (50) returning to 'compare_rdt_configurations' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:18: note: (51) calling 'xstrdup' from 'compare_rdt_configurations' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:215:1: note: (52) entry to 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:218:6: note: (53) following 'false' branch (when 'str' is non-NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (54) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:221:9: note: (55) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (56) assuming 'ret' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (57) following 'false' branch (when 'ret' is non-NULL)... <--[gcc] cc1: note: (58) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:18: note: (59) returning to 'compare_rdt_configurations' from 'xstrdup' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:222:6: note: (60) 'xstrdup(<unknown>)' leaks here; was allocated at (55) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c: In function 'resctl_update': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: warning: leak of file descriptor 'open(path, 524289)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:303:6: note: (1) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:306:9: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:307:6: note: (3) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:310:6: note: (5) following 'false' branch (when 'l3_cache_schema' is NULL)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (7) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:313:8: note: (8) 'open(path, 524289)' leaks here; was opened at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:122:9: warning: Although the value stored to 'a_copy' is used in the enclosing expression, the value is never actually read from 'a_copy' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:130:16: warning: Potential leak of memory pointed to by 'kv' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:130:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:136:9: warning: Although the value stored to 'b_copy' is used in the enclosing expression, the value is never actually read from 'b_copy' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:154:10: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:255:23: warning: Although the value stored to 'cleaned_l3_cache_schema' is used in the enclosing expression, the value is never actually read from 'cleaned_l3_cache_schema' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:311:23: warning: Although the value stored to 'cleaned_l3_cache_schema' is used in the enclosing expression, the value is never actually read from 'cleaned_l3_cache_schema' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/intelrdt.c:315:12: warning: Potential leak of memory pointed to by 'l3_cache_schema' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:25: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'libcrun_copy_seccomp': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of 'xmalloc(in_size + 1)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:836:1: note: (1) entry to 'libcrun_copy_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:845:14: note: (2) calling 'xmalloc' from 'libcrun_copy_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming 'res' is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:845:14: note: (8) returning to 'libcrun_copy_seccomp' from 'xmalloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (9) 'xmalloc(in_size + 1)' leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'evict_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: warning: leak of 'xrealloc(entries, (n_entries + 1) * 88)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:492:1: note: (1) entry to 'evict_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (4) following 'false' branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:529:14: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:531:25: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (12) calling 'xrealloc' from 'evict_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (15) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (16) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (18) returning to 'evict_cache' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:21: note: (19) 'xrealloc(entries, (n_entries + 1) * 88)' leaks here; was allocated at (14) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] In function 'cleanup_freep', inlined from 'evict_cache' at src/libcrun/seccomp.c:516:40: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: warning: double-'free' of 'entries' [CWE-415] [-Wanalyzer-double-free] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'evict_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:492:1: note: (1) entry to 'evict_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (4) following 'false' branch... <--[gcc] cc1: note: (5) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (6) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (8) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:529:14: note: (10) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:531:25: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (12) passing freed pointer 'entries' in call to 'xrealloc' from 'evict_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:77:1: note: (13) entry to 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:79:15: note: (14) when 'realloc' succeeds, moving buffer <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:80:6: note: (15) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:82:10: note: (16) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:554:25: note: (17) returning to 'evict_cache' from 'xrealloc' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:517:24: note: (18) inlined call to 'cleanup_dirp' from 'evict_cache' <--[gcc] In function 'cleanup_dirp', inlined from 'evict_cache' at src/libcrun/seccomp.c:517:24: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:197:6: note: (19) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:198:5: note: (20) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'evict_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:516:40: note: (21) inlined call to 'cleanup_freep' from 'evict_cache' <--[gcc] In function 'cleanup_freep', inlined from 'evict_cache' at src/libcrun/seccomp.c:516:40: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (22) second 'free' here <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/error.h:42, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:23, <--[gcc] from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:23: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '*(void *)p' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (2) following 'true' branch... <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second 'close' here; first 'close' was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:859:1: note: (1) entry to 'libcrun_open_seccomp_bpf' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:868:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (4) calling 'open_rundir_dirfd' from 'libcrun_open_seccomp_bpf' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (5) entry to 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (6) following 'false' branch... <--[gcc] cc1: note: (7) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (9) assuming 'open(libcrun_get_state_directory(state_root, 0), 2686976)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (11) inlined call to 'cleanup_freep' from 'open_rundir_dirfd' <--[gcc] In function 'cleanup_freep', inlined from 'open_rundir_dirfd' at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (13) returning to 'libcrun_open_seccomp_bpf' from 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:872:6: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:876:49: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:861:21: note: (16) inlined call to 'cleanup_closep' from 'libcrun_open_seccomp_bpf' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_open_seccomp_bpf' at src/libcrun/seccomp.c:861:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (17) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:861:21: note: (19) inlined call to 'cleanup_closep' from 'libcrun_open_seccomp_bpf' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_open_seccomp_bpf' at src/libcrun/seccomp.c:861:21: cc1: note: (20) calling 'cleanup_closep.part.0' from 'libcrun_open_seccomp_bpf' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (21) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (22) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (23) following 'true' branch... <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (25) second 'close' here; first 'close' was at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'memfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to 'libcrun_apply_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following 'false' branch (when 'infd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following 'true' branch (when 'listener_receiver_fd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (10) following 'true' branch... <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:24: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:269:38: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (12) inlined call to 'cleanup_closep' from 'libcrun_apply_seccomp' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_apply_seccomp' at src/libcrun/seccomp.c:250:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (13) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (14) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (15) inlined call to 'cleanup_closep' from 'libcrun_apply_seccomp' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_apply_seccomp' at src/libcrun/seccomp.c:250:25: cc1: note: (16) calling 'cleanup_closep.part.0' from 'libcrun_apply_seccomp' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (17) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (18) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (19) following 'true' branch... <--[gcc] cc1: note: (20) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (21) second 'close' here; first 'close' was at (18) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor '<unknown>' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to 'libcrun_apply_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following 'false' branch (when 'infd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following 'true' branch (when 'listener_receiver_fd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:261:10: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:267:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:271:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:273:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (16) calling 'close_and_reset' from 'libcrun_apply_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (17) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (20) returning to 'libcrun_apply_seccomp' from 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:284:10: note: (21) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:290:10: note: (22) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:290:10: note: (23) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (24) inlined call to 'cleanup_closep' from 'libcrun_apply_seccomp' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_apply_seccomp' at src/libcrun/seccomp.c:250:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (25) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (26) following 'false' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:325:6: note: (28) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:334:6: note: (29) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:334:6: note: (30) following 'true' branch (when 'listener_receiver_fd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:336:43: note: (31) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:206:21: note: (32) inlined call to 'cleanup_closep' from 'libcrun_apply_seccomp' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_apply_seccomp' at src/libcrun/seccomp.c:206:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (33) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (34) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:206:21: note: (35) inlined call to 'cleanup_closep' from 'libcrun_apply_seccomp' <--[gcc] In function 'cleanup_closep', inlined from 'libcrun_apply_seccomp' at src/libcrun/seccomp.c:206:21: cc1: note: (36) calling 'cleanup_closep.part.0' from 'libcrun_apply_seccomp' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (37) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (38) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (39) following 'true' branch... <--[gcc] cc1: note: (40) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (41) second 'close' here; first 'close' was at (38) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double 'close' of file descriptor 'dirfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:572:1: note: (1) entry to 'store_seccomp_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:580:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:583:7: note: (3) inlined call to 'is_empty_string' from 'store_seccomp_cache' <--[gcc] In function 'is_empty_string', inlined from 'store_seccomp_cache' at src/libcrun/seccomp.c:583:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:39: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (7) calling 'open_rundir_dirfd' from 'store_seccomp_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (8) entry to 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (9) following 'false' branch... <--[gcc] cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (12) assuming 'open(libcrun_get_state_directory(state_root, 0), 2686976)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (14) inlined call to 'cleanup_freep' from 'open_rundir_dirfd' <--[gcc] In function 'cleanup_freep', inlined from 'open_rundir_dirfd' at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (16) returning to 'store_seccomp_cache' from 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:587:6: note: (17) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:591:48: note: (18) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:577:21: note: (19) inlined call to 'cleanup_closep' from 'store_seccomp_cache' <--[gcc] In function 'cleanup_closep', inlined from 'store_seccomp_cache' at src/libcrun/seccomp.c:577:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (20) following 'true' branch... <--[gcc] In function 'cleanup_closep.part.0': cc1: note: (21) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:577:21: note: (22) inlined call to 'cleanup_closep' from 'store_seccomp_cache' <--[gcc] In function 'cleanup_closep', inlined from 'store_seccomp_cache' at src/libcrun/seccomp.c:577:21: cc1: note: (23) calling 'cleanup_closep.part.0' from 'store_seccomp_cache' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'cleanup_closep.part.0': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (24) entry to 'cleanup_closep.part.0' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (25) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: (26) following 'true' branch... <--[gcc] cc1: note: (27) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (28) second 'close' here; first 'close' was at (25) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function 'close_and_reset': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: warning: double 'close' of file descriptor 'memfd' [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:200:1: note: (1) entry to 'libcrun_apply_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:214:6: note: (2) following 'false' branch (when 'infd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:17: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:217:6: note: (4) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:221:6: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:242:6: note: (6) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:245:28: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:248:6: note: (8) following 'true' branch (when 'listener_receiver_fd >= 0')... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:250:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:261:10: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:267:13: note: (11) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:268:10: note: (12) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:271:13: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:273:10: note: (14) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:277:7: note: (16) calling 'close_and_reset' from 'libcrun_apply_seccomp' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:202:1: note: (17) entry to 'close_and_reset' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:205:6: note: (18) following 'true' branch... <--[gcc] cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (20) first 'close' here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:13: note: (21) following 'true' branch... <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:207:33: note: (23) second 'close' here; first 'close' was at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'libcrun_open_seccomp_bpf': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: warning: leak of file descriptor 'open_rundir_dirfd(*container_50->context.state_root, err)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:859:1: note: (1) entry to 'libcrun_open_seccomp_bpf' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:868:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (4) calling 'open_rundir_dirfd' from 'libcrun_open_seccomp_bpf' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (5) entry to 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (6) following 'false' branch... <--[gcc] cc1: note: (7) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (8) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (9) assuming 'open(libcrun_get_state_directory(state_root, 0), 2686976)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (10) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (11) inlined call to 'cleanup_freep' from 'open_rundir_dirfd' <--[gcc] In function 'cleanup_freep', inlined from 'open_rundir_dirfd' at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'libcrun_open_seccomp_bpf': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:871:11: note: (13) returning to 'libcrun_open_seccomp_bpf' from 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: note: (14) 'open_rundir_dirfd(*container_50->context.state_root, err)' leaks here; was opened at (8) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'store_seccomp_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: warning: leak of file descriptor 'open_rundir_dirfd(*container_44->context.state_root, err)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:572:1: note: (1) entry to 'store_seccomp_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:580:6: note: (2) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:583:7: note: (3) inlined call to 'is_empty_string' from 'store_seccomp_cache' <--[gcc] In function 'is_empty_string', inlined from 'store_seccomp_cache' at src/libcrun/seccomp.c:583:7: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:24: note: (4) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:391:20: note: (5) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'store_seccomp_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:39: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (7) calling 'open_rundir_dirfd' from 'store_seccomp_cache' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:455:1: note: (8) entry to 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (9) following 'false' branch... <--[gcc] cc1: note: (10) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (11) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (12) assuming 'open(libcrun_get_state_directory(state_root, 0), 2686976)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (13) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:457:22: note: (14) inlined call to 'cleanup_freep' from 'open_rundir_dirfd' <--[gcc] In function 'cleanup_freep', inlined from 'open_rundir_dirfd' at src/libcrun/seccomp.c:457:22: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:89:3: note: (15) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'store_seccomp_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:586:11: note: (16) returning to 'store_seccomp_cache' from 'open_rundir_dirfd' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:21: note: (17) 'open_rundir_dirfd(*container_44->context.state_root, err)' leaks here; was opened at (11) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro 'UNLIKELY' <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'open_rundir_dirfd': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: warning: leak of file descriptor 'open(libcrun_get_state_directory(state_root, 0), 2686976)' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (1) following 'false' branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (4) 'open(libcrun_get_state_directory(state_root, 0), 2686976)' leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: warning: leak of file descriptor '<unknown>' [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:461:6: note: (1) following 'false' branch... <--[gcc] cc1: note: (2) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:31: note: (3) opened here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:464:11: note: (4) assuming 'open(libcrun_get_state_directory(state_root, 0), 2686976)' is a valid file descriptor (>= 0) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:465:6: note: (5) '<unknown>' leaks here; was opened at (3) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c: In function 'evict_cache': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: warning: leak of 'fdopendir(cache_dir_fd)' [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (1) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (3) following 'false' branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (7) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (8) 'fdopendir(cache_dir_fd)' leaks here; was allocated at (7) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: warning: use of NULL 'entries' where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:500:6: note: (1) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:503:30: note: (2) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:506:6: note: (3) following 'false' branch... <--[gcc] cc1: note: (4) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:514:6: note: (5) following 'true' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:522:11: note: (6) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:523:10: note: (7) following 'false' branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:20: note: (8) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: note: (9) argument 1 ('entries') NULL where non-null expected <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.h:22: <--[gcc] /usr/include/stdlib.h:970:13: note: argument 1 of 'qsort' must be non-null <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:526:7: warning: Value stored to 'cache_dir_fd' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/seccomp.c:562:7: warning: Null pointer passed to 1st parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:108:7: warning: Value stored to 'fd0' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:133:7: warning: Value stored to 'fd1' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c: In function ‘test_send_receive_fd’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:144:1: warning: leak of file descriptor ‘pipes[1]’ [CWE-775] [-Wanalyzer-fd-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:74:1: note: (1) entry to ‘test_send_receive_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:82:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:85:12: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:88:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:91:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:92:6: note: (6) following ‘false’ branch (when ‘pid >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (8) following ‘true’ branch (when ‘pid != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (10) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (11) when ‘pipe’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:104:22: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:98:25: note: (14) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In file included from /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:20: <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:98:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (15) following ‘false’ branch... <--[gcc] In function ‘test_send_receive_fd’: cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:144:1: note: (17) ‘pipes[1]’ leaks here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘test_write_read_file’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: warning: leak of ‘xmalloc(1024)’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:190:1: note: (1) entry to ‘test_write_read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:198:32: note: (2) calling ‘xmalloc’ from ‘test_write_read_file’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:59:1: note: (3) entry to ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_utils tests/tests_libcrun_utils-tests_libcrun_utils.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl libtool: link: gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_utils tests/tests_libcrun_utils-tests_libcrun_utils.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_fuzzer tests/tests_libcrun_fuzzer-tests_libcrun_fuzzer.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl libocispec/libocispec.la libtool: link: gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/src -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tests/tests_libcrun_fuzzer tests/tests_libcrun_fuzzer-tests_libcrun_fuzzer.o libcrun_testing.a -lsystemd -lseccomp -lcap -lyajl libocispec/.libs/libocispec.a make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' 1.15/src/libcrun/utils.h:61:15: note: (4) allocated here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (5) assuming ‘res’ is non-NULL <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:6: note: (6) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:64:10: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:198:32: note: (8) returning to ‘test_write_read_file’ from ‘xmalloc’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:62:21: note: (9) ‘xmalloc(1024)’ leaks here; was allocated at (4) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:56:40: note: in definition of macro ‘UNLIKELY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘*(void *)p’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (1) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (2) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (3) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (4) second ‘close’ here; first ‘close’ was at (1) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘pipefd1’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:74:1: note: (1) entry to ‘test_send_receive_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:82:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:85:12: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:88:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:91:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:92:6: note: (6) following ‘false’ branch (when ‘pid >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (8) following ‘true’ branch (when ‘pid != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (10) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (11) when ‘pipe’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:104:22: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:98:25: note: (14) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:98:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (15) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (16) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:98:25: note: (17) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:98:25: cc1: note: (18) calling ‘cleanup_closep.part.0’ from ‘test_send_receive_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (19) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (20) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (21) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (22) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (23) second ‘close’ here; first ‘close’ was at (20) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘pipefd0’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:74:1: note: (1) entry to ‘test_send_receive_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:82:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:85:12: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:88:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:91:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:92:6: note: (6) following ‘false’ branch (when ‘pid >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (8) following ‘true’ branch (when ‘pid != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (10) opened here as read-write <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (11) when ‘pipe’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:10: note: (12) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:104:22: note: (13) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:98:25: note: (14) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:98:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (15) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (16) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:97:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:7: note: (17) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (18) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (19) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (20) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:97:25: cc1: note: (21) calling ‘cleanup_closep.part.0’ from ‘test_send_receive_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (22) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (23) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (24) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (25) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (26) second ‘close’ here; first ‘close’ was at (23) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: warning: double ‘close’ of file descriptor ‘fd1’ [CWE-1341] [-Wanalyzer-fd-double-close] <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:74:1: note: (1) entry to ‘test_send_receive_fd’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:82:6: note: (2) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:85:12: note: (3) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:88:6: note: (4) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:91:9: note: (5) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:92:6: note: (6) following ‘false’ branch (when ‘pid >= 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (7) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:95:6: note: (8) following ‘true’ branch (when ‘pid != 0’)... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:97:25: note: (9) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:11: note: (10) when ‘pipe’ succeeds <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:101:10: note: (11) following ‘false’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:104:22: note: (12) ...to here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:98:25: note: (13) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:98:25: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (14) following ‘false’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (15) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:79:21: note: (16) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:79:21: /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:104:6: note: (17) following ‘true’ branch... <--[gcc] In function ‘cleanup_closep.part.0’: cc1: note: (18) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/tests/tests_libcrun_utils.c:79:21: note: (19) inlined call to ‘cleanup_closep’ from ‘test_send_receive_fd’ <--[gcc] In function ‘cleanup_closep’, inlined from ‘test_send_receive_fd’ at tests/tests_libcrun_utils.c:79:21: cc1: note: (20) calling ‘cleanup_closep.part.0’ from ‘test_send_receive_fd’ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h: In function ‘cleanup_closep.part.0’: <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:101:1: note: (21) entry to ‘cleanup_closep.part.0’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (22) first ‘close’ here <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:40:27: note: (23) following ‘true’ branch... <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:5: note: in expansion of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] cc1: note: (24) ...to here /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:105:25: note: (25) second ‘close’ here; first ‘close’ was at (22) <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/utils.h:39:32: note: in definition of macro ‘TEMP_FAILURE_RETRY’ <--[gcc] make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-linux.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-linux.Tpo -c -o src/libcrun/libcrun_la-linux.lo `test -f 'src/libcrun/linux.c' || echo './'`src/libcrun/linux.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -MT src/libcrun/libcrun_la-linux.lo -MD -MP -MF src/libcrun/.deps/libcrun_la-linux.Tpo -c src/libcrun/linux.c -o src/libcrun/libcrun_la-linux.o mv -f src/libcrun/.deps/libcrun_la-linux.Tpo src/libcrun/.deps/libcrun_la-linux.Plo make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c: In function 'libcrun_safe_chdir': <--[gcc] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3651: error: uninitvar(CWE-457): Uninitialized variable: code <--[cppcheck] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:5751:14: warning: ignoring return value of 'chdir' declared with attribute 'warn_unused_result' [-Wunused-result] <--[gcc] 5751 | (void) chdir ("/"); | ^~~~~~~~~~~ /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:496:20: warning: Potential leak of memory pointed to by 'mappings' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:707:3: warning: Value stored to 'pid' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:1700:21: warning: Potential leak of memory pointed to by 'dirname' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:1790:51: warning: Array access (via field 'fds') results in a null pointer dereference [core.NullDereference] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2025:12: warning: Potential leak of memory pointed to by 'buffer' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2103:16: warning: Potential leak of memory pointed to by 'data' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2346:12: warning: Potential leak of memory pointed to by 'data' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2510:36: warning: Potential leak of memory pointed to by 'container_notify_socket_path_dir_alloc' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2558:16: warning: Potential leak of memory pointed to by 'tmp' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:2624:18: warning: Although the value stored to 'rootfsfd_cleanup' is used in the enclosing expression, the value is never actually read from 'rootfsfd_cleanup' [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3043:11: warning: Potential leak of memory pointed to by 'gid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3043:11: warning: Potential leak of memory pointed to by 'gid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3074:11: warning: Potential leak of memory pointed to by 'uid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3074:11: warning: Potential leak of memory pointed to by 'uid_map' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3090:15: warning: Potential leak of memory pointed to by 'single_mapping' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3386:15: warning: Value stored to 'namespace' during its initialization is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:3488:16: warning: Potential leak of memory pointed to by 'it' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:4861:11: warning: Value stored to 'ret' is never read [deadcode.DeadStores] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c:5746:12: warning: Potential leak of memory pointed to by 'buffer' [unix.Malloc] <--[clang] /builddir/build/BUILD/crun-1.15-build/crun-1.15/src/libcrun/linux.c: internal warning: child 13261 timed out after 30s <--[gcc] cswrap: error: child 13261 (/usr/bin/gcc) terminated by signal 15 (timed out) make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,--version-script=/builddir/build/BUILD/crun-1.15-build/crun-1.15/libcrun.lds -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o libcrun.la -rpath /usr/local/lib src/libcrun/libcrun_la-utils.lo src/libcrun/blake3/libcrun_la-blake3.lo src/libcrun/blake3/libcrun_la-blake3_portable.lo src/libcrun/libcrun_la-cgroup-cgroupfs.lo src/libcrun/libcrun_la-cgroup-resources.lo src/libcrun/libcrun_la-cgroup-setup.lo src/libcrun/libcrun_la-cgroup-systemd.lo src/libcrun/libcrun_la-cgroup-utils.lo src/libcrun/libcrun_la-cgroup.lo src/libcrun/libcrun_la-chroot_realpath.lo src/libcrun/libcrun_la-cloned_binary.lo src/libcrun/libcrun_la-container.lo src/libcrun/libcrun_la-criu.lo src/libcrun/libcrun_la-custom-handler.lo src/libcrun/libcrun_la-ebpf.lo src/libcrun/libcrun_la-error.lo src/libcrun/handlers/libcrun_la-handler-utils.lo src/libcrun/handlers/libcrun_la-krun.lo src/libcrun/handlers/libcrun_la-mono.lo src/libcrun/handlers/libcrun_la-spin.lo src/libcrun/handlers/libcrun_la-wasmedge.lo src/libcrun/handlers/libcrun_la-wasmer.lo src/libcrun/handlers/libcrun_la-wasmtime.lo src/libcrun/libcrun_la-intelrdt.lo src/libcrun/libcrun_la-io_priority.lo src/libcrun/libcrun_la-linux.lo src/libcrun/libcrun_la-mount_flags.lo src/libcrun/libcrun_la-scheduler.lo src/libcrun/libcrun_la-seccomp.lo src/libcrun/libcrun_la-seccomp_notify.lo src/libcrun/libcrun_la-signals.lo src/libcrun/libcrun_la-status.lo src/libcrun/libcrun_la-terminal.lo libocispec/libocispec.la -lsystemd -lseccomp -lcap -lyajl libtool: link: (cd .libs/libcrun.lax/libocispec.a && ar x "/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/.libs/libocispec.a") libtool: link: ar cr .libs/libcrun.a src/libcrun/libcrun_la-utils.o src/libcrun/blake3/libcrun_la-blake3.o src/libcrun/blake3/libcrun_la-blake3_portable.o src/libcrun/libcrun_la-cgroup-cgroupfs.o src/libcrun/libcrun_la-cgroup-resources.o src/libcrun/libcrun_la-cgroup-setup.o src/libcrun/libcrun_la-cgroup-systemd.o src/libcrun/libcrun_la-cgroup-utils.o src/libcrun/libcrun_la-cgroup.o src/libcrun/libcrun_la-chroot_realpath.o src/libcrun/libcrun_la-cloned_binary.o src/libcrun/libcrun_la-container.o src/libcrun/libcrun_la-criu.o src/libcrun/libcrun_la-custom-handler.o src/libcrun/libcrun_la-ebpf.o src/libcrun/libcrun_la-error.o src/libcrun/handlers/libcrun_la-handler-utils.o src/libcrun/handlers/libcrun_la-krun.o src/libcrun/handlers/libcrun_la-mono.o src/libcrun/handlers/libcrun_la-spin.o src/libcrun/handlers/libcrun_la-wasmedge.o src/libcrun/handlers/libcrun_la-wasmer.o src/libcrun/handlers/libcrun_la-wasmtime.o src/libcrun/libcrun_la-intelrdt.o src/libcrun/libcrun_la-io_priority.o src/libcrun/libcrun_la-linux.o src/libcrun/libcrun_la-mount_flags.o src/libcrun/libcrun_la-scheduler.o src/libcrun/libcrun_la-seccomp.o src/libcrun/libcrun_la-seccomp_notify.o src/libcrun/libcrun_la-signals.o src/libcrun/libcrun_la-status.o src/libcrun/libcrun_la-terminal.o .libs/libcrun.lax/libocispec.a/basic_test_double_array.o .libs/libcrun.lax/libocispec.a/basic_test_double_array_item.o .libs/libcrun.lax/libocispec.a/basic_test_top_array_int.o .libs/libcrun.lax/libocispec.a/basic_test_top_array_string.o .libs/libcrun.lax/libocispec.a/basic_test_top_double_array_int.o .libs/libcrun.lax/libocispec.a/basic_test_top_double_array_obj.o .libs/libcrun.lax/libocispec.a/basic_test_top_double_array_refobj.o .libs/libcrun.lax/libocispec.a/basic_test_top_double_array_string.o .libs/libcrun.lax/libocispec.a/image_manifest_items_image_manifest_items_schema.o .libs/libcrun.lax/libocispec.a/image_spec_schema_config_schema.o .libs/libcrun.lax/libocispec.a/image_spec_schema_content_descriptor.o .libs/libcrun.lax/libocispec.a/image_spec_schema_defs.o .libs/libcrun.lax/libocispec.a/image_spec_schema_defs_descriptor.o .libs/libcrun.lax/libocispec.a/image_spec_schema_image_index_schema.o .libs/libcrun.lax/libocispec.a/image_spec_schema_image_layout_schema.o .libs/libcrun.lax/libocispec.a/image_spec_schema_image_manifest_schema.o .libs/libcrun.lax/libocispec.a/json_common.o .libs/libcrun.lax/libocispec.a/read-file.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_linux.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_schema.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_solaris.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_vm.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_windows.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_config_zos.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_defs.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_defs_linux.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_defs_vm.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_defs_windows.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_defs_zos.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_features_linux.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_features_schema.o .libs/libcrun.lax/libocispec.a/runtime_spec_schema_state_schema.o libtool: link: ranlib .libs/libcrun.a libtool: link: rm -fr .libs/libcrun.lax libtool: link: ( cd ".libs" && rm -f "libcrun.la" && ln -s "../libcrun.la" "libcrun.la" ) make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /bin/sh ./libtool --tag=CC --mode=link gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR="\"/usr/local/lib/crun\"" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o crun src/crun-crun.o src/crun-run.o src/crun-delete.o src/crun-kill.o src/crun-pause.o src/crun-unpause.o src/crun-oci_features.o src/crun-spec.o src/crun-exec.o src/crun-list.o src/crun-create.o src/crun-start.o src/crun-state.o src/crun-update.o src/crun-ps.o src/crun-checkpoint.o src/crun-restore.o src/libcrun/crun-cloned_binary.o libcrun.la -lsystemd -lseccomp -lcap -lyajl libtool: link: gcc -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -I /builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/src -D CRUN_LIBDIR=\"/usr/local/lib/crun\" -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o crun src/crun-crun.o src/crun-run.o src/crun-delete.o src/crun-kill.o src/crun-pause.o src/crun-unpause.o src/crun-oci_features.o src/crun-spec.o src/crun-exec.o src/crun-list.o src/crun-create.o src/crun-start.o src/crun-state.o src/crun-update.o src/crun-ps.o src/crun-checkpoint.o src/crun-restore.o src/libcrun/crun-cloned_binary.o ./.libs/libcrun.a -lsystemd -lseccomp -lcap -lyajl make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' + RPM_EC=0 ++ jobs -p + exit 0 Finish: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/crun.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'\\""'] Finish: run >>> 2024-07-03 12:22:04 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "rpmbuild --nocheck" >>> 2024-07-03 12:22:05 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--chroot" "/bin/su mockbuild -l -c \"PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\\$PATH CSWRAP_CAP_FILE=\\\$'/builddir/cswrap-capture.err' CSWRAP_TIMEOUT=\\\$'30' CSWRAP_TIMEOUT_FOR=\\\$'::clang:clang++:cppcheck:gcc' CSWRAP_ADD_CFLAGS=\\\$'-Wno-unknown-pragmas' CSWRAP_DEL_CFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' CSWRAP_ADD_CXXFLAGS=\\\$'' CSWRAP_DEL_CXXFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' sh -c \\\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/crun.spec '--define' '_unpackaged_files_terminate_build 0' '--define' 'apidocs 0' '--define' 'with_publican 0' '--without' 'docs' '--without' 'langpacks' '--nocheck' '--define' 'libguestfs_runtests 0' '--define' 'runselftest 0' '--without' 'testsuite'\\\"\"" INFO: mock.py version 5.6 starting (python version = 3.9.19, NVR = mock-5.6-1.el9), args: /usr/libexec/mock/mock -r fedora-41-x86_64 --plugin-option=tmpfs:keep_mounted=True --config-opts=print_main_output=True --chroot '/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\$PATH CSWRAP_CAP_FILE=\$'"'"'/builddir/cswrap-capture.err'"'"' CSWRAP_TIMEOUT=\$'"'"'30'"'"' CSWRAP_TIMEOUT_FOR=\$'"'"'::clang:clang++:cppcheck:gcc'"'"' CSWRAP_ADD_CFLAGS=\$'"'"'-Wno-unknown-pragmas'"'"' CSWRAP_DEL_CFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' CSWRAP_ADD_CXXFLAGS=\$'"'"''"'"' CSWRAP_DEL_CXXFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' sh -c \"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/crun.spec '"'"'--define'"'"' '"'"'_unpackaged_files_terminate_build 0'"'"' '"'"'--define'"'"' '"'"'apidocs 0'"'"' '"'"'--define'"'"' '"'"'with_publican 0'"'"' '"'"'--without'"'"' '"'"'docs'"'"' '"'"'--without'"'"' '"'"'langpacks'"'"' '"'"'--nocheck'"'"' '"'"'--define'"'"' '"'"'libguestfs_runtests 0'"'"' '"'"'--define'"'"' '"'"'runselftest 0'"'"' '"'"'--without'"'"' '"'"'testsuite'"'"'\""' Start(bootstrap): init plugins INFO: selinux enabled Finish(bootstrap): init plugins Start: init plugins INFO: selinux enabled Finish: init plugins INFO: Signal handler active Start: run Mock Version: 5.6 INFO: Mock Version: 5.6 Start(bootstrap): chroot init INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: Running in chroot: ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/crun.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""'] Start: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/crun.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""'] setting SOURCE_DATE_EPOCH=1714608000 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.sPZA7L + umask 022 + cd /builddir/build/BUILD/crun-1.15-build + '[' /builddir/build/BUILD/crun-1.15-build/BUILDROOT '!=' / ']' + rm -rf /builddir/build/BUILD/crun-1.15-build/BUILDROOT ++ dirname /builddir/build/BUILD/crun-1.15-build/BUILDROOT + mkdir -p /builddir/build/BUILD/crun-1.15-build + mkdir /builddir/build/BUILD/crun-1.15-build/BUILDROOT + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd crun-1.15 + /usr/bin/make install DESTDIR=/builddir/build/BUILD/crun-1.15-build/BUILDROOT 'INSTALL=/usr/bin/install -p' prefix=/usr /usr/bin/make install-recursive make[1]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' Making install in libocispec make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' /usr/bin/make install-recursive make[3]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' Making install in yajl make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/yajl' make[5]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/yajl' make[5]: Nothing to be done for 'install-exec-am'. make[5]: Nothing to be done for 'install-data-am'. make[5]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/yajl' make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec/yajl' make[4]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[5]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[5]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[4]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[3]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15/libocispec' make[2]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[3]: Entering directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' /usr/bin/mkdir -p '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib' /bin/sh ./libtool --mode=install /usr/bin/install -p libcrun.la '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib' libtool: install: /usr/bin/install -p .libs/libcrun.lai /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib/libcrun.la libtool: install: /usr/bin/install -p .libs/libcrun.a /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib/libcrun.a libtool: install: chmod 644 /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib/libcrun.a libtool: install: ranlib /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib/libcrun.a libtool: warning: remember to run 'libtool --finish /usr/local/lib' /usr/bin/mkdir -p '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/bin' /bin/sh ./libtool --mode=install /usr/bin/install -p crun '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/bin' libtool: install: /usr/bin/install -p crun /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/bin/crun /usr/bin/mkdir -p '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/man/man1' /usr/bin/install -p -m 644 crun.1 krun.1 '/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/man/man1' make[3]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[2]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' make[1]: Leaving directory '/builddir/build/BUILD/crun-1.15-build/crun-1.15' + rm -rf /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/lib + ln -s crun /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/bin/krun + ln -s crun /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/bin/crun-wasm + /usr/bin/find-debuginfo -j8 --strict-build-id -m -i --build-id-seed 1.15-1.fc41 --unique-debug-suffix -1.15-1.fc41.x86_64 --unique-debug-src-base crun-1.15-1.fc41.x86_64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 110000000 -S debugsourcefiles.list /builddir/build/BUILD/crun-1.15-build/crun-1.15 find-debuginfo: starting Extracting debug info from 1 files DWARF-compressing 1 files sepdebugcrcfix: Updated 1 CRC32s, 0 CRC32s did match. Creating .debug symlinks for symlinks to ELF files Copying sources found by 'debugedit -l' to /usr/src/debug/crun-1.15-1.fc41.x86_64 3121 blocks find-debuginfo: done + /usr/lib/rpm/check-buildroot + /usr/lib/rpm/redhat/brp-ldconfig + /usr/lib/rpm/brp-compress + /usr/lib/rpm/redhat/brp-strip-lto /usr/bin/strip + /usr/lib/rpm/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/check-rpaths + /usr/lib/rpm/redhat/brp-mangle-shebangs + /usr/lib/rpm/brp-remove-la-files + env /usr/lib/rpm/redhat/brp-python-bytecompile '' 1 0 -j8 + /usr/lib/rpm/redhat/brp-python-hardlink + /usr/bin/add-determinism --brp -j8 /builddir/build/BUILD/crun-1.15-build/BUILDROOT Scanned 20 directories and 121 files, processed 0 inodes, 0 modified (0 replaced + 0 rewritten), 0 unsupported format, 0 errors Reading /builddir/build/BUILD/crun-1.15-build/SPECPARTS/rpm-debuginfo.specpart Processing files: crun-1.15-1.fc41.x86_64 Executing(%license): /bin/sh -e /var/tmp/rpm-tmp.eDNKx2 + umask 022 + cd /builddir/build/BUILD/crun-1.15-build + cd crun-1.15 + LICENSEDIR=/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun + export LC_ALL=C.UTF-8 + LC_ALL=C.UTF-8 + export LICENSEDIR + /usr/bin/mkdir -p /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun + cp -pr /builddir/build/BUILD/crun-1.15-build/crun-1.15/COPYING /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun + RPM_EC=0 ++ jobs -p + exit 0 Provides: crun = 1.15-1.fc41 crun(x86-64) = 1.15-1.fc41 oci-runtime Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Requires: libc.so.6()(64bit) libc.so.6(GLIBC_2.11)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.27)(64bit) libc.so.6(GLIBC_2.28)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.5)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.9)(64bit) libc.so.6(GLIBC_ABI_DT_RELR)(64bit) libcap.so.2()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgcc_s.so.1(GCC_3.3.1)(64bit) libseccomp.so.2()(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_221)(64bit) libsystemd.so.0(LIBSYSTEMD_237)(64bit) libsystemd.so.0(LIBSYSTEMD_246)(64bit) libyajl.so.2()(64bit) rtld(GNU_HASH) Recommends: criu >= 3.17.1 criu-libs Processing files: crun-krun-1.15-1.fc41.x86_64 Executing(%license): /bin/sh -e /var/tmp/rpm-tmp.rLiKPL + umask 022 + cd /builddir/build/BUILD/crun-1.15-build + cd crun-1.15 + LICENSEDIR=/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-krun + export LC_ALL=C.UTF-8 + LC_ALL=C.UTF-8 + export LICENSEDIR + /usr/bin/mkdir -p /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-krun + cp -pr /builddir/build/BUILD/crun-1.15-build/crun-1.15/COPYING /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-krun + RPM_EC=0 ++ jobs -p + exit 0 Provides: crun-krun = 1.15-1.fc41 crun-krun(x86-64) = 1.15-1.fc41 krun = 1.15-1.fc41 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Processing files: crun-wasm-1.15-1.fc41.x86_64 Executing(%license): /bin/sh -e /var/tmp/rpm-tmp.CsCQTF + umask 022 + cd /builddir/build/BUILD/crun-1.15-build + cd crun-1.15 + LICENSEDIR=/builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-wasm + export LC_ALL=C.UTF-8 + LC_ALL=C.UTF-8 + export LICENSEDIR + /usr/bin/mkdir -p /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-wasm + cp -pr /builddir/build/BUILD/crun-1.15-build/crun-1.15/COPYING /builddir/build/BUILD/crun-1.15-build/BUILDROOT/usr/share/licenses/crun-wasm + RPM_EC=0 ++ jobs -p + exit 0 Provides: crun-wasm = 1.15-1.fc41 crun-wasm(x86-64) = 1.15-1.fc41 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Recommends: wasmedge Processing files: crun-debugsource-1.15-1.fc41.x86_64 Provides: crun-debugsource = 1.15-1.fc41 crun-debugsource(x86-64) = 1.15-1.fc41 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Processing files: crun-debuginfo-1.15-1.fc41.x86_64 Provides: crun-debuginfo = 1.15-1.fc41 crun-debuginfo(x86-64) = 1.15-1.fc41 debuginfo(build-id) = 51ce521f68f46f3d2d5831c210e62f4d731b2bed Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Recommends: crun-debugsource(x86-64) = 1.15-1.fc41 Checking for unpackaged file(s): /usr/lib/rpm/check-files /builddir/build/BUILD/crun-1.15-build/BUILDROOT Finish: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/crun.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""'] Finish: run >>> 2024-07-03 12:22:07 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "/usr/share/csmock/scripts/run-shellcheck.sh /builddir/build/BUILDROOT > /builddir/shellcheck-capture.err" >>> 2024-07-03 12:22:08 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'tar -c --remove-files '/builddir/cswrap-capture.err' '/builddir/shellcheck-capture.err'' | tar -xC '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/raw-results'" tar: Removing leading `/' from member names tar: Removing leading `/' from hard link targets >>> 2024-07-03 12:22:09 "cat '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/raw-results/builddir/cswrap-capture.err' | csgrep --mode=json --quiet --path '^/builddir/build/BUILD/' --remove-duplicates | csgrep --mode=json --invert-match --checker CLANG_WARNING --event error | csgrep --mode=json --invert-match --checker CPPCHECK_WARNING --event 'cppcheckError|internalAstError|preprocessorErrorDirective|syntaxError|unknownMacro' | csgrep --mode=json --invert-match --checker COMPILER_WARNING --event error > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/uni-results/cswrap-capture.js'" >>> 2024-07-03 12:22:11 "csgrep --quiet '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/raw-results/builddir/shellcheck-capture.err' | csgrep --invert-match --event '^note|warning\\[SC1090\\]' > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/uni-results/shellcheck-capture.err'" scan.ini: time-finished = 2024-07-03 12:22:11 scan.ini: exit-code = 0 >>> 2024-07-03 12:22:11 "cslinker --quiet --cwelist '/usr/share/csmock/cwe-map.csv' --inifile '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan.ini' '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/uni-results'/* > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/scan-results-all.js'" >>> 2024-07-03 12:22:11 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'csgrep --mode=json --embed-context 3 '--warning-rate-limit=1024' '--limit-msg-len=512'' <'/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/scan-results-all.js' >'/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/scan-results-all.js.tmp'" >>> 2024-07-03 12:22:13 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--clean" >>> 2024-07-03 12:22:15 "cat '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/scan-results-all.js' | sed 's|/builddir/build/BUILDROOT/[^/]*/|/builddir/build/BUILD//|' | csgrep --mode=json --path '^/builddir/build/BUILD/' --strip-path-prefix /builddir/build/BUILD/ | csgrep --mode=json --invert-match --path '^ksh-.*[0-9]+\\.c\$' | csgrep --mode=json --invert-match --path 'CMakeFiles/CMakeTmp|conftest.c' | cssort --key=path > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.js'" >>> 2024-07-03 12:22:17 "cat '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/scan-results-all.js' | sed 's|/builddir/build/BUILDROOT/[^/]*/|/builddir/build/BUILD//|' | csgrep --mode=json --strip-path-prefix /builddir/build/BUILD/ | csdiff --show-internal '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.js' - | cssort > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.js'" >>> 2024-07-03 12:22:18 "csgrep --mode=grep --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.js' > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.err'" >>> 2024-07-03 12:22:18 "csgrep --mode=json --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.js' | cshtml - > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.html'" >>> 2024-07-03 12:22:18 "csgrep --mode=evtstat --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results.js' | tee '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/debug/suppressed-results-summary.txt'" >>> 2024-07-03 12:22:18 "csgrep --mode=grep --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.js' > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.err'" >>> 2024-07-03 12:22:18 "csgrep --mode=json --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.js' | cshtml - > '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.html'" >>> 2024-07-03 12:22:19 "csgrep --mode=evtstat --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results.js' | tee '/tmp/csmockdkwpwbj1/crun-1.15-1.fc41/scan-results-summary.txt'" 4 CLANG_WARNING warning[core.NonNullParamChecker] 8 CLANG_WARNING warning[core.NullDereference] 1 CLANG_WARNING warning[core.uninitialized.Branch] 58 CLANG_WARNING warning[deadcode.DeadStores] 185 CLANG_WARNING warning[unix.Malloc] 6 COMPILER_WARNING warning[-Wmaybe-uninitialized] 1 COMPILER_WARNING warning[-Wstringop-truncation] 2 COMPILER_WARNING warning[-Wunused-result] 2 COMPILER_WARNING warning[-Wunused-variable] 52 CPPCHECK_WARNING error[memleak] 1 CPPCHECK_WARNING error[uninitvar] 94 CPPCHECK_WARNING information[normalCheckLevelMaxBranches] 2 CPPCHECK_WARNING warning[uninitvar] 10 GCC_ANALYZER_WARNING warning[-Wanalyzer-double-free] 66 GCC_ANALYZER_WARNING warning[-Wanalyzer-fd-double-close] 62 GCC_ANALYZER_WARNING warning[-Wanalyzer-fd-leak] 2 GCC_ANALYZER_WARNING warning[-Wanalyzer-file-leak] 1 GCC_ANALYZER_WARNING warning[-Wanalyzer-infinite-loop] 200 GCC_ANALYZER_WARNING warning[-Wanalyzer-malloc-leak] 13 GCC_ANALYZER_WARNING warning[-Wanalyzer-null-argument] 28 GCC_ANALYZER_WARNING warning[-Wanalyzer-null-dereference] 5 GCC_ANALYZER_WARNING warning[-Wanalyzer-use-of-uninitialized-value] <<< 2024-07-03 12:22:19 csmock exit code: 0