Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
crun-HEAD/src/libcrun/criu.c:1016:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(**_189.path, 0)'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
crun-HEAD/src/libcrun/criu.c:866:17: note: in expansion of macro 'YAJL_IS_ARRAY'
# 1014|         if (value == CLONE_NEWNET && def->linux->namespaces[i]->path != NULL)
# 1015|           {
# 1016|->           inherit_new_net_fd = open (def->linux->namespaces[i]->path, open_flags_for_inherit);
# 1017|             if (UNLIKELY (inherit_new_net_fd < 0))
# 1018|               return crun_make_error (err, errno, "unable to open(): `%s`", def->linux->namespaces[i]->path);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
crun-HEAD/src/libcrun/criu.c:1027:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(**_210.path, 0)'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
crun-HEAD/src/libcrun/criu.c:866:17: note: in expansion of macro 'YAJL_IS_ARRAY'
# 1025|         if (value == CLONE_NEWPID && def->linux->namespaces[i]->path != NULL)
# 1026|           {
# 1027|->           inherit_new_pid_fd = open (def->linux->namespaces[i]->path, open_flags_for_inherit);
# 1028|             if (UNLIKELY (inherit_new_pid_fd < 0))
# 1029|               return crun_make_error (err, errno, "unable to open(): `%s`", def->linux->namespaces[i]->path);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def3]
crun-HEAD/src/libcrun/seccomp.c: scope_hint: In function 'store_seccomp_cache'
crun-HEAD/src/libcrun/seccomp.c:467:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open_rundir_dirfd(*container_44->context.state_root,  err)'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
crun-HEAD/src/libcrun/seccomp.c: scope_hint: In function 'store_seccomp_cache'
crun-HEAD/src/libcrun/seccomp.c: scope_hint: In function 'store_seccomp_cache'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
#  465|   
#  466|     ret = libcrun_get_state_directory (&dir, state_root, NULL, err);
#  467|->   if (UNLIKELY (ret < 0))
#  468|       return ret;
#  469|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def4]
crun-HEAD/src/libcrun/seccomp.c: scope_hint: In function 'libcrun_open_seccomp_bpf'
crun-HEAD/src/libcrun/seccomp.c:467:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open_rundir_dirfd(*container_50->context.state_root,  err)'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
crun-HEAD/src/libcrun/seccomp.c: scope_hint: In function 'libcrun_open_seccomp_bpf'
crun-HEAD/src/libcrun/utils.h:57:40: note: in definition of macro 'UNLIKELY'
#  465|   
#  466|     ret = libcrun_get_state_directory (&dir, state_root, NULL, err);
#  467|->   if (UNLIKELY (ret < 0))
#  468|       return ret;
#  469|   

Scan Properties