Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
openscap-1.4.3-build/openscap-1.4.3/src/OVAL/probes/unix/linux/iflisteners_probe.c: scope_hint: In function ‘iflisteners_probe_main’
openscap-1.4.3-build/openscap-1.4.3/src/OVAL/probes/unix/linux/iflisteners_probe.c:470:16: warning[-Wanalyzer-malloc-leak]: leak of ‘ll.head’
openscap-1.4.3-build/openscap-1.4.3/src/OVAL/probes/unix/linux/iflisteners_probe.c: scope_hint: In function ‘iflisteners_probe_main’
#  468|   	SEXP_free(interface_name_ent);
#  469|   
#  470|-> 	return err;
#  471|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
openscap-1.4.3-build/openscap-1.4.3/utils/oscap-cpe.c: scope_hint: In function ‘getopt_cpe’
openscap-1.4.3-build/openscap-1.4.3/utils/oscap-cpe.c:134:42: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*action.cpe_action’
#  132|   	action->cpe_action = malloc(sizeof(struct cpe_action));
#  133|   	if (action->module == &CPE_MATCH_MODULE) {
#  134|-> 		action->cpe_action->name = argv[optind];
#  135|   		action->cpe_action->dict = argv[optind + 1];
#  136|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
openscap-1.4.3-build/openscap-1.4.3/utils/oscap-cpe.c:138:42: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*action.cpe_action’
#  136|   	}
#  137|   	if (action->module == &CPE_CHECK_MODULE) {
#  138|-> 		action->cpe_action->name = argv[optind];
#  139|   	}
#  140|   	if (action->module == &CPE_VALIDATE) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
openscap-1.4.3-build/openscap-1.4.3/utils/oscap-cpe.c:141:42: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*action.cpe_action’
#  139|   	}
#  140|   	if (action->module == &CPE_VALIDATE) {
#  141|-> 		action->cpe_action->dict = argv[optind];
#  142|   	}
#  143|   	return true;

Scan Properties