Task #810 - libnftnl-1.2.6-6.fc41/scan.log
back to task #810download
scan.ini: [scan]
scan.ini: tool = csmock
scan.ini: tool-version = csmock-3.5.3-1.el9
scan.ini: tool-args = '/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp14dy1mq1/libnftnl-1.2.6-6.fc41.tar.xz' '--gcc-analyze' '/tmp/tmp14dy1mq1/libnftnl-1.2.6-6.fc41.src.rpm'
scan.ini: host = ip-172-16-1-154.us-west-2.compute.internal
scan.ini: store-results-to = /tmp/tmp14dy1mq1/libnftnl-1.2.6-6.fc41.tar.xz
scan.ini: time-created = 2024-07-03 15:48:32
scan.ini: enabled-plugins = clang, cppcheck, gcc, shellcheck
scan.ini: mock-config = fedora-41-x86_64
scan.ini: project-name = libnftnl-1.2.6-6.fc41
>>> 2024-07-03 15:48:32 "rpm -qa | sort -V > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/rpm-list-host.txt'"
>>> 2024-07-03 15:48:33 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--init"
INFO: mock.py version 5.6 starting (python version = 3.9.19, NVR = mock-5.6-1.el9), args: /usr/libexec/mock/mock -r fedora-41-x86_64 --plugin-option=tmpfs:keep_mounted=True --config-opts=print_main_output=True --init
Start(bootstrap): init plugins
INFO: selinux enabled
Finish(bootstrap): init plugins
Start: init plugins
INFO: selinux enabled
Finish: init plugins
INFO: Signal handler active
Start: run
Start: clean chroot
Finish: clean chroot
Mock Version: 5.6
INFO: Mock Version: 5.6
Start(bootstrap): chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: calling preinit hooks
INFO: enabled root cache
Start: unpacking root cache
Finish: unpacking root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
Finish: run
>>> 2024-07-03 15:48:35 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--installdeps" "/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm"
Updating and loading repositories:
fedora 100% | 1.3 MiB/s | 24.8 KiB | 00m00s
Repositories loaded.
Package Arch Version Repository Size
Installing:
gcc x86_64 14.1.1-6.fc41 fedora 104.1 MiB
libmnl-devel x86_64 1.0.5-5.fc40 fedora 200.1 KiB
make x86_64 1:4.4.1-6.fc40 fedora 1.8 MiB
Installing dependencies:
annobin-docs noarch 12.60-1.fc41 fedora 96.2 KiB
annobin-plugin-gcc x86_64 12.60-1.fc41 fedora 976.2 KiB
cpp x86_64 14.1.1-6.fc41 fedora 35.0 MiB
gc x86_64 8.2.2-6.fc40 fedora 258.7 KiB
gcc-plugin-annobin x86_64 14.1.1-6.fc41 fedora 57.1 KiB
glibc-devel x86_64 2.39.9000-26.fc41 fedora 36.8 KiB
glibc-headers-x86 noarch 2.39.9000-26.fc41 fedora 2.2 MiB
guile30 x86_64 3.0.9-1.fc41 fedora 52.7 MiB
kernel-headers x86_64 6.10.0-0.rc6.50.fc41 fedora 6.3 MiB
libmnl x86_64 1.0.5-5.fc40 fedora 55.2 KiB
libmpc x86_64 1.3.1-5.fc40 fedora 164.7 KiB
libxcrypt-devel x86_64 4.4.36-5.fc40 fedora 30.3 KiB
Transaction Summary:
Installing: 15 packages
Total size of inbound packages is 62 MiB. Need to download 0 B.
After this operation 204 MiB will be used (install 204 MiB, remove 0 B).
[ 1/15] gcc-0:14.1.1-6.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 2/15] make-1:4.4.1-6.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 3/15] libmnl-devel-0:1.0.5-5.fc40.x86 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 4/15] cpp-0:14.1.1-6.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 5/15] libmpc-0:1.3.1-5.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 6/15] guile30-0:3.0.9-1.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 7/15] libmnl-0:1.0.5-5.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 8/15] gc-0:8.2.2-6.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 9/15] annobin-plugin-gcc-0:12.60-1.fc 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[10/15] gcc-plugin-annobin-0:14.1.1-6.f 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[11/15] annobin-docs-0:12.60-1.fc41.noa 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[12/15] glibc-devel-0:2.39.9000-26.fc41 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[13/15] glibc-headers-x86-0:2.39.9000-2 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[14/15] libxcrypt-devel-0:4.4.36-5.fc40 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[15/15] kernel-headers-0:6.10.0-0.rc6.5 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
--------------------------------------------------------------------------------
[15/15] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
[ 1/17] Verify package files 100% | 75.0 B/s | 15.0 B | 00m00s
[ 2/17] Prepare transaction 100% | 600.0 B/s | 15.0 B | 00m00s
[ 3/17] Installing libmpc-0:1.3.1-5.fc4 100% | 27.1 MiB/s | 166.2 KiB | 00m00s
[ 4/17] Installing cpp-0:14.1.1-6.fc41. 100% | 336.5 MiB/s | 35.0 MiB | 00m00s
[ 5/17] Installing kernel-headers-0:6.1 100% | 111.2 MiB/s | 6.4 MiB | 00m00s
[ 6/17] Installing glibc-headers-x86-0: 100% | 84.6 MiB/s | 2.3 MiB | 00m00s
[ 7/17] Installing libxcrypt-devel-0:4. 100% | 8.0 MiB/s | 32.6 KiB | 00m00s
[ 8/17] Installing glibc-devel-0:2.39.9 100% | 7.9 MiB/s | 40.5 KiB | 00m00s
[ 9/17] Installing annobin-docs-0:12.60 100% | 31.7 MiB/s | 97.4 KiB | 00m00s
[10/17] Installing gc-0:8.2.2-6.fc40.x8 100% | 31.9 MiB/s | 261.2 KiB | 00m00s
[11/17] Installing guile30-0:3.0.9-1.fc 100% | 361.6 MiB/s | 52.8 MiB | 00m00s
[12/17] Installing make-1:4.4.1-6.fc40. 100% | 138.5 MiB/s | 1.8 MiB | 00m00s
[13/17] Installing gcc-0:14.1.1-6.fc41. 100% | 387.2 MiB/s | 104.2 MiB | 00m00s
>>> Running trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
>>> Stop trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
[14/17] Installing libmnl-0:1.0.5-5.fc4 100% | 11.0 MiB/s | 56.6 KiB | 00m00s
[15/17] Installing libmnl-devel-0:1.0.5 100% | 40.3 MiB/s | 206.1 KiB | 00m00s
[16/17] Installing annobin-plugin-gcc-0 100% | 68.2 MiB/s | 977.9 KiB | 00m00s
>>> Running trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
>>> Stop trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
warning: posix.fork(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.wait(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.exec(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
[17/17] Installing gcc-plugin-annobin-0 100% | 24.2 KiB/s | 58.6 KiB | 00m02s
>>> Running trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
>>> Stop trigger-install scriptlet: redhat-rpm-config-0:293-1.fc41.noarch
>>> Running trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> Stop trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> Running trigger-install scriptlet: info-0:7.1-2.fc40.x86_64
>>> Stop trigger-install scriptlet: info-0:7.1-2.fc40.x86_64
>>> 2024-07-03 15:48:40 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--install" "tar" "clang" "cppcheck" "gcc" "ShellCheck"
Updating and loading repositories:
fedora 100% | 1.1 MiB/s | 24.8 KiB | 00m00s
Repositories loaded.
Package "tar-2:1.35-3.fc40.x86_64" is already installed.
Package "gcc-14.1.1-6.fc41.x86_64" is already installed.
Package Arch Version Repository Size
Installing:
ShellCheck x86_64 0.10.0-1.fc41 fedora 33.9 MiB
clang x86_64 18.1.7-1.fc41 fedora 587.7 KiB
cppcheck x86_64 2.14.2-1.fc41 fedora 10.1 MiB
Installing dependencies:
clang-libs x86_64 18.1.7-1.fc41 fedora 107.8 MiB
clang-resource-filesystem noarch 18.1.7-1.fc41 fedora 522.0 B
expat x86_64 2.6.2-1.fc41 fedora 280.8 KiB
gcc-c++ x86_64 14.1.1-6.fc41 fedora 38.1 MiB
libb2 x86_64 0.98.1-11.fc40 fedora 42.2 KiB
libedit x86_64 3.1-51.20240517cvs.fc41 fedora 243.9 KiB
libstdc++-devel x86_64 14.1.1-6.fc41 fedora 15.4 MiB
llvm-libs x86_64 18.1.7-1.fc41 fedora 113.5 MiB
mpdecimal x86_64 2.5.1-9.fc40 fedora 200.9 KiB
pcre x86_64 8.45-1.fc40.6 fedora 541.8 KiB
python-pip-wheel noarch 24.1.1-1.fc41 fedora 1.2 MiB
python3 x86_64 3.13.0~b3-1.fc41 fedora 31.8 KiB
python3-libs x86_64 3.13.0~b3-1.fc41 fedora 40.5 MiB
tinyxml2 x86_64 9.0.0-4.fc40 fedora 103.8 KiB
tzdata noarch 2024a-8.fc41 fedora 1.7 MiB
Transaction Summary:
Installing: 18 packages
Total size of inbound packages is 87 MiB. Need to download 0 B.
After this operation 364 MiB will be used (install 364 MiB, remove 0 B).
[ 1/18] cppcheck-0:2.14.2-1.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 2/18] ShellCheck-0:0.10.0-1.fc41.x86_ 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 3/18] clang-0:18.1.7-1.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 4/18] pcre-0:8.45-1.fc40.6.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 5/18] tinyxml2-0:9.0.0-4.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 6/18] clang-libs-0:18.1.7-1.fc41.x86_ 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 7/18] llvm-libs-0:18.1.7-1.fc41.x86_6 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 8/18] clang-resource-filesystem-0:18. 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[ 9/18] libedit-0:3.1-51.20240517cvs.fc 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[10/18] python3-0:3.13.0~b3-1.fc41.x86_ 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[11/18] python3-libs-0:3.13.0~b3-1.fc41 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[12/18] expat-0:2.6.2-1.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[13/18] libb2-0:0.98.1-11.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[14/18] mpdecimal-0:2.5.1-9.fc40.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[15/18] python-pip-wheel-0:24.1.1-1.fc4 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[16/18] tzdata-0:2024a-8.fc41.noarch 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[17/18] gcc-c++-0:14.1.1-6.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[18/18] libstdc++-devel-0:14.1.1-6.fc41 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
--------------------------------------------------------------------------------
[18/18] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
[ 1/20] Verify package files 100% | 62.0 B/s | 18.0 B | 00m00s
[ 2/20] Prepare transaction 100% | 486.0 B/s | 18.0 B | 00m00s
[ 3/20] Installing libstdc++-devel-0:14 100% | 219.0 MiB/s | 15.6 MiB | 00m00s
[ 4/20] Installing gcc-c++-0:14.1.1-6.f 100% | 331.8 MiB/s | 38.2 MiB | 00m00s
[ 5/20] Installing tzdata-0:2024a-8.fc4 100% | 30.3 MiB/s | 1.9 MiB | 00m00s
[ 6/20] Installing python-pip-wheel-0:2 100% | 208.3 MiB/s | 1.2 MiB | 00m00s
[ 7/20] Installing mpdecimal-0:2.5.1-9. 100% | 49.3 MiB/s | 202.0 KiB | 00m00s
[ 8/20] Installing libb2-0:0.98.1-11.fc 100% | 10.6 MiB/s | 43.3 KiB | 00m00s
[ 9/20] Installing expat-0:2.6.2-1.fc41 100% | 27.6 MiB/s | 282.9 KiB | 00m00s
[10/20] Installing python3-libs-0:3.13. 100% | 236.1 MiB/s | 40.8 MiB | 00m00s
[11/20] Installing python3-0:3.13.0~b3- 100% | 10.9 MiB/s | 33.6 KiB | 00m00s
[12/20] Installing libedit-0:3.1-51.202 100% | 48.0 MiB/s | 245.6 KiB | 00m00s
[13/20] Installing llvm-libs-0:18.1.7-1 100% | 394.0 MiB/s | 113.5 MiB | 00m00s
[14/20] Installing clang-resource-files 100% | 391.6 KiB/s | 1.6 KiB | 00m00s
[15/20] Installing clang-libs-0:18.1.7- 100% | 438.3 MiB/s | 107.8 MiB | 00m00s
[16/20] Installing tinyxml2-0:9.0.0-4.f 100% | 25.6 MiB/s | 104.9 KiB | 00m00s
[17/20] Installing pcre-0:8.45-1.fc40.6 100% | 88.6 MiB/s | 544.1 KiB | 00m00s
[18/20] Installing cppcheck-0:2.14.2-1. 100% | 315.0 MiB/s | 10.1 MiB | 00m00s
[19/20] Installing clang-0:18.1.7-1.fc4 100% | 115.3 MiB/s | 590.4 KiB | 00m00s
warning: posix.fork(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.wait(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.exec(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
[20/20] Installing ShellCheck-0:0.10.0- 100% | 18.8 MiB/s | 33.9 MiB | 00m02s
>>> Running trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> Stop trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> 2024-07-03 15:48:45 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa' | sort -V > /tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/rpm-list-mock.txt"
>>> 2024-07-03 15:48:47 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa --provides' | sort -V > /tmp/csmockv3a811is/rpm-list-mock-provides.txt"
>>> 2024-07-03 15:48:48 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--copyin" "/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm" "/builddir/libnftnl-1.2.6-6.fc41.src.rpm"
>>> 2024-07-03 15:48:49 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "chown mockbuild -R /builddir"
>>> 2024-07-03 15:48:50 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "/bin/su mockbuild -l -c \"rpm -Uvh --nodeps '/builddir/libnftnl-1.2.6-6.fc41.src.rpm'\""
Updating / installing...
libnftnl-1.2.6-6.fc41 ########################################
>>> 2024-07-03 15:48:51 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "/bin/su mockbuild -l -c \"rpmbuild -bs --nodeps /builddir/build/SPECS/libnftnl.spec '--define' '_unpackaged_files_terminate_build 0' '--define' 'apidocs 0' '--define' 'with_publican 0' '--without' 'docs' '--without' 'langpacks' && sh -c 'cd /builddir/build/SRPMS && eval mv -v *.src.rpm /builddir/libnftnl-1.2.6-6.fc41.src.rpm || :'\""
setting SOURCE_DATE_EPOCH=1719878400
Wrote: /builddir/build/SRPMS/libnftnl-1.2.6-6.fc41.src.rpm
renamed 'libnftnl-1.2.6-6.fc41.src.rpm' -> '/builddir/libnftnl-1.2.6-6.fc41.src.rpm'
>>> 2024-07-03 15:48:52 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--disable-plugin=selinux" "--copyout" "/builddir/libnftnl-1.2.6-6.fc41.src.rpm" "/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm"
>>> 2024-07-03 15:48:53 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--installdeps" "/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm"
Updating and loading repositories:
fedora 100% | 1.3 MiB/s | 24.8 KiB | 00m00s
Repositories loaded.
Package "gcc-14.1.1-6.fc41.x86_64" is already installed.
Package "libmnl-devel-1.0.5-5.fc40.x86_64" is already installed.
Package "make-1:4.4.1-6.fc40.x86_64" is already installed.
Nothing to do.
>>> 2024-07-03 15:48:54 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--install" "tar" "clang" "cppcheck" "gcc" "ShellCheck"
Updating and loading repositories:
fedora 100% | 1.2 MiB/s | 24.8 KiB | 00m00s
Repositories loaded.
Package "tar-2:1.35-3.fc40.x86_64" is already installed.
Package "clang-18.1.7-1.fc41.x86_64" is already installed.
Package "cppcheck-2.14.2-1.fc41.x86_64" is already installed.
Package "gcc-14.1.1-6.fc41.x86_64" is already installed.
Package "ShellCheck-0.10.0-1.fc41.x86_64" is already installed.
Nothing to do.
>>> 2024-07-03 15:48:56 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa' | sort -V > /tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/rpm-list-mock.txt"
>>> 2024-07-03 15:48:57 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa --provides' | sort -V > /tmp/csmockv3a811is/rpm-list-mock-provides.txt"
>>> 2024-07-03 15:48:58 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--install" "csdiff"
Updating and loading repositories:
fedora 100% | 1.3 MiB/s | 24.8 KiB | 00m00s
Repositories loaded.
Package Arch Version Repository Size
Installing:
csdiff x86_64 3.4.0-1.fc41 fedora 3.6 MiB
Installing dependencies:
boost-atomic x86_64 1.83.0-7.fc41 fedora 21.0 KiB
boost-filesystem x86_64 1.83.0-7.fc41 fedora 147.6 KiB
boost-program-options x86_64 1.83.0-7.fc41 fedora 272.7 KiB
boost-system x86_64 1.83.0-7.fc41 fedora 16.3 KiB
Transaction Summary:
Installing: 5 packages
Total size of inbound packages is 1 MiB. Need to download 0 B.
After this operation 4 MiB will be used (install 4 MiB, remove 0 B).
[1/5] csdiff-0:3.4.0-1.fc41.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[2/5] boost-filesystem-0:1.83.0-7.fc41. 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[3/5] boost-program-options-0:1.83.0-7. 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[4/5] boost-atomic-0:1.83.0-7.fc41.x86_ 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
[5/5] boost-system-0:1.83.0-7.fc41.x86_ 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
--------------------------------------------------------------------------------
[5/5] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
[1/7] Verify package files 100% | 1.2 KiB/s | 5.0 B | 00m00s
[2/7] Prepare transaction 100% | 277.0 B/s | 5.0 B | 00m00s
[3/7] Installing boost-system-0:1.83.0- 100% | 3.4 MiB/s | 17.3 KiB | 00m00s
[4/7] Installing boost-atomic-0:1.83.0- 100% | 7.2 MiB/s | 22.0 KiB | 00m00s
[5/7] Installing boost-filesystem-0:1.8 100% | 36.3 MiB/s | 148.6 KiB | 00m00s
[6/7] Installing boost-program-options- 100% | 53.5 MiB/s | 273.8 KiB | 00m00s
warning: posix.fork(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.wait(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
warning: posix.exec(): .fork(), .exec(), .wait() and .redirect2null() are deprecated, use rpm.execute() instead
[7/7] Installing csdiff-0:3.4.0-1.fc41. 100% | 45.1 MiB/s | 3.7 MiB | 00m00s
>>> Running trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> Stop trigger-install scriptlet: glibc-common-0:2.39.9000-26.fc41.x86_64
>>> 2024-07-03 15:49:00 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa' | sort -V > /tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/rpm-list-mock.txt"
>>> 2024-07-03 15:49:01 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'rpm -qa --provides' | sort -V > /tmp/csmockv3a811is/rpm-list-mock-provides.txt"
>>> 2024-07-03 15:49:02 "tar -cP '/usr/share/csmock/scripts' '/usr/bin/cswrap' '/usr/lib64/cswrap' '/usr/bin/csclng' '/usr/lib64/csclng' '/usr/bin/csclng++' '/usr/bin/cscppc' '/usr/lib64/cscppc' '/usr/share/cscppc' '/usr/bin/csgcca' '/usr/lib64/csgcca' '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm' | '/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'tar -xC/'"
tar: Removing leading `/' from member names
scan.ini: analyzer-version-clang = 18.1.7
scan.ini: analyzer-version-cppcheck = 2.14.2
scan.ini: analyzer-version-gcc = 14.1.1
>>> 2024-07-03 15:49:04 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "/bin/su mockbuild -l -c \"echo 'int main() {}' | gcc -xc - -c -o /dev/null -fanalyzer -fdiagnostics-path-format=separate-events\""
scan.ini: analyzer-version-gcc-analyzer = 14.1.1
scan.ini: analyzer-version-shellcheck = 0.10.0
>>> 2024-07-03 15:49:06 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "rpm -Uvh --nodeps '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41.src.rpm'"
Updating / installing...
libnftnl-1.2.6-6.fc41 ########################################
>>> 2024-07-03 15:49:07 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "chmod -R +r /builddir"
>>> 2024-07-03 15:49:08 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--shell" "for i in /usr/share/csmock/scripts/chroot-fixups/*; do test -x \$i && echo RUN: \$i >&2 && \$i; done"
RUN: /usr/share/csmock/scripts/chroot-fixups/gdk-pixbuf2-triggers.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/glib2-triggers.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/kpathsea-texhash.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/openssl-public-header-files.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/qt5-core-abi.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/rpm-build-scripts.sh
+ sed -e s/fail=1/fail=0/ -i /usr/lib/rpm/redhat/brp-mangle-shebangs
'/usr/lib/rpm/brp-strip-static-archive' -> '/bin/true'
RUN: /usr/share/csmock/scripts/chroot-fixups/rpm-macros.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/rpm-python-extras.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/shared-mime-info-triggers.sh
RUN: /usr/share/csmock/scripts/chroot-fixups/symbiotic-timeout.sh
>>> 2024-07-03 15:49:09 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--chroot" "/bin/su mockbuild -l -c \"rpmbuild -bp --nodeps /builddir/build/SPECS/libnftnl.spec '--define' '_unpackaged_files_terminate_build 0' '--define' 'apidocs 0' '--define' 'with_publican 0' '--without' 'docs' '--without' 'langpacks'\""
INFO: mock.py version 5.6 starting (python version = 3.9.19, NVR = mock-5.6-1.el9), args: /usr/libexec/mock/mock -r fedora-41-x86_64 --plugin-option=tmpfs:keep_mounted=True --config-opts=print_main_output=True --chroot '/bin/su mockbuild -l -c "rpmbuild -bp --nodeps /builddir/build/SPECS/libnftnl.spec '"'"'--define'"'"' '"'"'_unpackaged_files_terminate_build 0'"'"' '"'"'--define'"'"' '"'"'apidocs 0'"'"' '"'"'--define'"'"' '"'"'with_publican 0'"'"' '"'"'--without'"'"' '"'"'docs'"'"' '"'"'--without'"'"' '"'"'langpacks'"'"'"'
Start(bootstrap): init plugins
INFO: selinux enabled
Finish(bootstrap): init plugins
Start: init plugins
INFO: selinux enabled
Finish: init plugins
INFO: Signal handler active
Start: run
Mock Version: 5.6
INFO: Mock Version: 5.6
Start(bootstrap): chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
INFO: Running in chroot: ['/bin/su mockbuild -l -c "rpmbuild -bp --nodeps /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'"']
Start: chroot ['/bin/su mockbuild -l -c "rpmbuild -bp --nodeps /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'"']
setting SOURCE_DATE_EPOCH=1719878400
Executing(%mkbuilddir): /bin/sh -e /var/tmp/rpm-tmp.t8VZ3Y
+ umask 022
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ test -d /builddir/build/BUILD/libnftnl-1.2.6-build
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w /builddir/build/BUILD/libnftnl-1.2.6-build
+ /usr/bin/rm -rf /builddir/build/BUILD/libnftnl-1.2.6-build
+ /usr/bin/mkdir -p /builddir/build/BUILD/libnftnl-1.2.6-build
+ /usr/bin/mkdir -p /builddir/build/BUILD/libnftnl-1.2.6-build/SPECPARTS
+ RPM_EC=0
++ jobs -p
+ exit 0
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.aDG87g
+ umask 022
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ rm -rf libnftnl-1.2.6
+ /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/libnftnl-1.2.6.tar.xz
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ cd libnftnl-1.2.6
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-set-Do-not-leave-free-d-expr_list-elements-in-place.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-object-define-nftnl_obj_unset.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-set-buffer-overflow-in-NFTNL_SET_DESC_CONCAT-setter.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-obj-ct_timeout-setter-checks-for-timeout-array-bound.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-tests-Fix-objref-test-case.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-chain-Validate-NFTNL_CHAIN_USE-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-table-Validate-NFTNL_TABLE_USE-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-flowtable-Validate-NFTNL_FLOWTABLE_SIZE-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-obj-Validate-NFTNL_OBJ_TYPE-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-set-Validate-NFTNL_SET_ID-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-table-Validate-NFTNL_TABLE_OWNER-too.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-obj-Do-not-call-nftnl_obj_set_data-with-zero-data_le.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-obj-synproxy-Use-memcpy-to-handle-potentially-unalig.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-utils-Fix-for-wrong-variable-use-in-nftnl_assert_val.patch
+ /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch -f
+ RPM_EC=0
++ jobs -p
+ exit 0
Finish: chroot ['/bin/su mockbuild -l -c "rpmbuild -bp --nodeps /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'"']
Finish: run
>>> 2024-07-03 15:49:10 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "chmod -R +r /builddir/build"
>>> 2024-07-03 15:49:11 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--chroot" "/bin/su mockbuild -l -c \"PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\\$PATH CSWRAP_CAP_FILE=\\\$'/builddir/cswrap-capture.err' CSWRAP_TIMEOUT=\\\$'30' CSWRAP_TIMEOUT_FOR=\\\$'::clang:clang++:cppcheck:gcc' CSWRAP_ADD_CFLAGS=\\\$'-Wno-unknown-pragmas' CSWRAP_DEL_CFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' CSWRAP_ADD_CXXFLAGS=\\\$'' CSWRAP_DEL_CXXFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' sh -c \\\"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec '--define' '_unpackaged_files_terminate_build 0' '--define' 'apidocs 0' '--define' 'with_publican 0' '--without' 'docs' '--without' 'langpacks'\\\"\""
INFO: mock.py version 5.6 starting (python version = 3.9.19, NVR = mock-5.6-1.el9), args: /usr/libexec/mock/mock -r fedora-41-x86_64 --plugin-option=tmpfs:keep_mounted=True --config-opts=print_main_output=True --chroot '/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\$PATH CSWRAP_CAP_FILE=\$'"'"'/builddir/cswrap-capture.err'"'"' CSWRAP_TIMEOUT=\$'"'"'30'"'"' CSWRAP_TIMEOUT_FOR=\$'"'"'::clang:clang++:cppcheck:gcc'"'"' CSWRAP_ADD_CFLAGS=\$'"'"'-Wno-unknown-pragmas'"'"' CSWRAP_DEL_CFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' CSWRAP_ADD_CXXFLAGS=\$'"'"''"'"' CSWRAP_DEL_CXXFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' sh -c \"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec '"'"'--define'"'"' '"'"'_unpackaged_files_terminate_build 0'"'"' '"'"'--define'"'"' '"'"'apidocs 0'"'"' '"'"'--define'"'"' '"'"'with_publican 0'"'"' '"'"'--without'"'"' '"'"'docs'"'"' '"'"'--without'"'"' '"'"'langpacks'"'"'\""'
Start(bootstrap): init plugins
INFO: selinux enabled
Finish(bootstrap): init plugins
Start: init plugins
INFO: selinux enabled
Finish: init plugins
INFO: Signal handler active
Start: run
Mock Version: 5.6
INFO: Mock Version: 5.6
Start(bootstrap): chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
INFO: Running in chroot: ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'\\""']
Start: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'\\""']
setting SOURCE_DATE_EPOCH=1719878400
Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.AQjH6t
+ umask 022
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CFLAGS
+ CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CXXFLAGS
+ FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FFLAGS
+ FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FCFLAGS
+ VALAFLAGS=-g
+ export VALAFLAGS
+ RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn'
+ export RUSTFLAGS
+ LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes '
+ export LDFLAGS
+ LT_SYS_LIBRARY_PATH=/usr/lib64:
+ export LT_SYS_LIBRARY_PATH
+ CC=gcc
+ export CC
+ CXX=g++
+ export CXX
+ cd libnftnl-1.2.6
+ CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CFLAGS
+ CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CXXFLAGS
+ FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FFLAGS
+ FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FCFLAGS
+ VALAFLAGS=-g
+ export VALAFLAGS
+ RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn'
+ export RUSTFLAGS
+ LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes '
+ export LDFLAGS
+ LT_SYS_LIBRARY_PATH=/usr/lib64:
+ export LT_SYS_LIBRARY_PATH
+ CC=gcc
+ export CC
+ CXX=g++
+ export CXX
+ '[' '-flto=auto -ffat-lto-objectsx' '!=' x ']'
++ find . -type f -name configure -print
+ for file in $(find . -type f -name configure -print)
+ /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\) = /__attribute__ ((used)) char (*f) () = /g' ./configure
+ diff -u ./configure.backup ./configure
+ mv ./configure.backup ./configure
+ /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\);/__attribute__ ((used)) char (*f) ();/g' ./configure
+ diff -u ./configure.backup ./configure
+ mv ./configure.backup ./configure
+ /usr/bin/sed -r --in-place=.backup 's/^char \$2 \(\);/__attribute__ ((used)) char \$2 ();/g' ./configure
+ diff -u ./configure.backup ./configure
--- ./configure.backup 2023-07-11 16:31:06.103137003 +0000
+++ ./configure 2024-07-03 15:49:13.055817895 +0000
@@ -1766,7 +1766,7 @@
#ifdef __cplusplus
extern "C"
#endif
-char $2 ();
+__attribute__ ((used)) char $2 ();
/* The GNU C library defines this for functions which it implements
to always fail with ENOSYS. Some functions are actually named
something starting with __ and the normal name is an alias. */
+ /usr/bin/sed --in-place=.backup '1{$!N;$!N};$!N;s/int x = 1;\nint y = 0;\nint z;\nint nan;/volatile int x = 1; volatile int y = 0; volatile int z, nan;/;P;D' ./configure
+ diff -u ./configure.backup ./configure
+ mv ./configure.backup ./configure
+ /usr/bin/sed --in-place=.backup 's#^lt_cv_sys_global_symbol_to_cdecl=.*#lt_cv_sys_global_symbol_to_cdecl="sed -n -e '\''s/^T .* \\(.*\\)$/extern int \\1();/p'\'' -e '\''s/^$symcode* .* \\(.*\\)$/extern char \\1;/p'\''"#' ./configure
+ diff -u ./configure.backup ./configure
--- ./configure.backup 2024-07-03 15:49:13.055817895 +0000
+++ ./configure 2024-07-03 15:49:13.069817797 +0000
@@ -7023,7 +7023,7 @@
# Transform an extracted symbol line into a proper C declaration.
# Some systems (esp. on ia64) link data and code symbols differently,
# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="sed -n"\
+lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'"
$lt_cdecl_hook\
" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
@@ -13828,7 +13828,7 @@
compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
+lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'"
lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
+ '[' 1 = 1 ']'
+++ dirname ./configure
++ find . -name config.guess -o -name config.sub
+ for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub)
++ basename ./build-aux/config.sub
+ '[' -f /usr/lib/rpm/redhat/config.sub ']'
+ /usr/bin/rm -f ./build-aux/config.sub
++ basename ./build-aux/config.sub
+ /usr/bin/cp -fv /usr/lib/rpm/redhat/config.sub ./build-aux/config.sub
'/usr/lib/rpm/redhat/config.sub' -> './build-aux/config.sub'
+ for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub)
++ basename ./build-aux/config.guess
+ '[' -f /usr/lib/rpm/redhat/config.guess ']'
+ /usr/bin/rm -f ./build-aux/config.guess
++ basename ./build-aux/config.guess
+ /usr/bin/cp -fv /usr/lib/rpm/redhat/config.guess ./build-aux/config.guess
'/usr/lib/rpm/redhat/config.guess' -> './build-aux/config.guess'
+ '[' 1 = 1 ']'
+ '[' x '!=' 'x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' ']'
++ find . -name ltmain.sh
+ for i in $(find . -name ltmain.sh)
+ /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' ./build-aux/ltmain.sh
++ grep -q runstatedir=DIR ./configure
++ echo --runstatedir=/run
+ ./configure --build=x86_64-redhat-linux --host=x86_64-redhat-linux --program-prefix= --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --runstatedir=/run --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info --disable-static --disable-silent-rules
checking build system type... x86_64-redhat-linux-gnu
checking host system type... x86_64-redhat-linux-gnu
checking for x86_64-redhat-linux-gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking for x86_64-redhat-linux-ar... no
checking for x86_64-redhat-linux-lib... no
checking for x86_64-redhat-linux-link... no
checking for ar... ar
checking the archiver (ar) interface... ar
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports the include directive... yes (GNU style)
checking whether make supports nested variables... yes
checking how to create a pax tar archive... gnutar
checking dependency style of gcc... none
checking whether make supports nested variables... (cached) yes
checking for x86_64-redhat-linux-pkg-config... no
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for libmnl >= 1.0.4... yes
checking for x86_64-redhat-linux-gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking whether gcc understands -c and -o together... (cached) yes
checking how to print strings... printf
checking for a sed that does not truncate output... /usr/bin/sed
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-redhat-linux-gnu file names to x86_64-redhat-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-redhat-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for x86_64-redhat-linux-objdump... no
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for x86_64-redhat-linux-dlltool... no
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for x86_64-redhat-linux-ar... ar
checking for archiver @FILE support... @
checking for x86_64-redhat-linux-strip... no
checking for strip... strip
checking for x86_64-redhat-linux-ranlib... no
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ./configure: line 7029: -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/extern char \1;/p': No such file or directory
ok
checking for sysroot... no
checking for a working dd... /usr/bin/dd
checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1
checking for x86_64-redhat-linux-mt... no
checking for mt... no
checking if : is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... no
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... no
checking whether compiler accepts -fvisibility=hidden... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating include/Makefile
config.status: creating include/libnftnl/Makefile
config.status: creating include/linux/Makefile
config.status: creating include/linux/netfilter/Makefile
config.status: creating examples/Makefile
config.status: creating tests/Makefile
config.status: creating libnftnl.pc
config.status: creating doxygen.cfg
config.status: creating config.h
config.status: executing depfiles commands
config.status: executing libtool commands
+ /usr/bin/make -O -j8 V=1 VERBOSE=1
/usr/bin/make all-recursive
Making all in src
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o batch.lo batch.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c batch.c -fPIC -DPIC -o .libs/batch.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o gen.lo gen.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c gen.c -fPIC -DPIC -o .libs/gen.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o common.lo common.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c common.c -fPIC -DPIC -o .libs/common.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o utils.lo utils.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c utils.c -fPIC -DPIC -o .libs/utils.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o table.lo table.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c table.c -fPIC -DPIC -o .libs/table.o
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c: In function ‘nftnl_table_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:148:6: note: (1) entry to ‘nftnl_table_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:148:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:150:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:11: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 4:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:111:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:6: note: (1) entry to ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:162:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 4:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:111:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: note: (9) out-of-bounds read from byte 1 till byte 7 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:112:17: note: read of 7 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:115:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:6: note: (1) entry to ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:162:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 2:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:114:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:115:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:115:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:118:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:6: note: (1) entry to ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:162:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 1:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:117:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:118:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:118:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:121:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:6: note: (1) entry to ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:162:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 3:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:120:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:121:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:121:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:134:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:6: note: (1) entry to ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:160:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:162:9: note: (3) calling ‘nftnl_table_set_data’ from ‘nftnl_table_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:96:5: note: (4) entry to ‘nftnl_table_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:100:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:102:9: note: (7) following ‘case 6:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:133:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:134:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/table.c:134:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o trace.lo trace.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c trace.c -fPIC -DPIC -o .libs/trace.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/trace.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o object.lo object.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c object.c -fPIC -DPIC -o .libs/object.o
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c: In function ‘nftnl_obj_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:6: note: (1) entry to ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:71: note: (2) capacity: 2 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:170:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:9: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 2:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:123:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: note: (11) out-of-bounds read from byte 2 till byte 3 but ‘val’ ends at byte 2 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: note: read of 2 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘uint32_t’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint16_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 2 bytes│ │⚠️ over-read of 2 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:6: note: (1) entry to ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:69: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:164:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 2:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:123:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: note: (11) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:124:28: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘uint32_t’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:6: note: (1) entry to ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:69: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:164:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 3:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:128:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: note: (11) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:6: note: (1) entry to ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:71: note: (2) capacity: 2 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:170:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 3:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:128:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: note: (11) out-of-bounds read from byte 2 till byte 3 but ‘val’ ends at byte 2 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:129:17: note: read of 2 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint16_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 2 bytes│ │⚠️ over-read of 2 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:6: note: (1) entry to ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:69: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:164:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 4:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:131:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: note: (11) out-of-bounds read from byte 1 till byte 3 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: note: read of 3 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:6: note: (1) entry to ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:71: note: (2) capacity: 2 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:170:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 4:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:131:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: note: (11) out-of-bounds read from byte 2 till byte 3 but ‘val’ ends at byte 2 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:132:17: note: read of 2 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint16_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 2 bytes│ │⚠️ over-read of 2 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:174:6: note: (1) entry to ‘nftnl_obj_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:174:71: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:176:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 5:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:134:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: (11) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:6: note: (1) entry to ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:168:71: note: (2) capacity: 2 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:170:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u16’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 5:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:134:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: (11) out-of-bounds read from byte 2 till byte 7 but ‘val’ ends at byte 2 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: read of 6 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘val’ (type: ‘uint16_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 2 bytes│ │⚠️ over-read of 6 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:6: note: (1) entry to ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:162:69: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:164:9: note: (3) calling ‘nftnl_obj_set_data’ from ‘nftnl_obj_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:108:6: note: (4) entry to ‘nftnl_obj_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:111:12: note: (5) following ‘true’ branch (when ‘attr <= 15’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (7) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:112:17: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:114:9: note: (9) following ‘case 5:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:134:9: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: (11) out-of-bounds read from byte 1 till byte 7 but ‘val’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/object.c:135:17: note: read of 7 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌───────────────────────┐┌─────────────────────────────────────────────┐
│‘val’ (type: ‘uint8_t’)││ after valid range │
└───────────────────────┘└─────────────────────────────────────────────┘
├───────────┬───────────┤├──────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o udata.lo udata.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c udata.c -fPIC -DPIC -o .libs/udata.o
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:83: warning: nullPointer(CWE-476): Possible null pointer dereference: value <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c: In function ‘nftnl_udata_put’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:83:9: warning: use of NULL ‘value’ where non-null expected [CWE-476] [-Wanalyzer-null-argument] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:155:21: note: (1) entry to ‘nftnl_udata_nest_start’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:160:9: note: (2) calling ‘nftnl_udata_put’ from ‘nftnl_udata_nest_start’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:72:6: note: (3) entry to ‘nftnl_udata_put’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:77:12: note: (4) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:80:14: note: (5) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:83:9: note: (6) argument 2 (‘value’) NULL where non-null expected <--[gcc]
<built-in>: note: argument 2 of ‘__builtin_memcpy’ must be non-null
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/udata.c:83:2: warning: Null pointer passed to 2nd parameter expecting 'nonnull' [core.NonNullParamChecker] <--[clang]
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr_ops.lo expr_ops.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr_ops.c -fPIC -DPIC -o .libs/expr_ops.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr.lo expr.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr.c -fPIC -DPIC -o .libs/expr.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/byteorder.lo expr/byteorder.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/byteorder.c -fPIC -DPIC -o expr/.libs/byteorder.o
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/byteorder.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/bitwise.lo expr/bitwise.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/bitwise.c -fPIC -DPIC -o expr/.libs/bitwise.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/bitwise.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o flowtable.lo flowtable.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c flowtable.c -fPIC -DPIC -o .libs/flowtable.o
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c: In function ‘nftnl_flowtable_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:1: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) allocated 4 bytes here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:148:33: note: (9) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (13) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (13) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │4 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │4 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────┘
^
│
│
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint64_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 8 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │8 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │12 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │12 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │20 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │20 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │16 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │28 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │28 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │24 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │32 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │36 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │36 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │40 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │44 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │44 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note:make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/cmp.lo expr/cmp.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/cmp.c -fPIC -DPIC -o expr/.libs/cmp.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/range.lo expr/range.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/range.c -fPIC -DPIC -o expr/.libs/range.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/connlimit.lo expr/connlimit.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/connlimit.c -fPIC -DPIC -o expr/.libs/connlimit.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/counter.lo expr/counter.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/counter.c -fPIC -DPIC -o expr/.libs/counter.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/ct.lo expr/ct.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/ct.c -fPIC -DPIC -o expr/.libs/ct.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
(4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │52 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │52 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:6: note: (1) entry to ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:205:81: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:207:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │48 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) allocated 4 bytes here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 6:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:158:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:161:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:162:59: note: (13) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:6: note: (1) entry to ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:187:81: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:189:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 9:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:172:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:6: note: (1) entry to ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:193:80: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:195:9: note: (3) calling ‘nftnl_flowtable_set_data’ from ‘nftnl_flowtable_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:111:5: note: (4) entry to ‘nftnl_flowtable_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:118:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:120:9: note: (7) following ‘case 9:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:172:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/flowtable.c:173:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/ruleset.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/data_reg.c:148: error: overlappingWriteUnion(CWE-0): Overlapping read/write of union is undefined behavior <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/exthdr.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/fwd.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/lookup.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/immediate.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/dup.lo expr/dup.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/dup.c -fPIC -DPIC -o expr/.libs/dup.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o ruleset.lo ruleset.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c ruleset.c -fPIC -DPIC -o .libs/ruleset.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/data_reg.lo expr/data_reg.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/data_reg.c -fPIC -DPIC -o expr/.libs/data_reg.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/exthdr.lo expr/exthdr.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/exthdr.c -fPIC -DPIC -o expr/.libs/exthdr.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/flow_offload.lo expr/flow_offload.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/flow_offload.c -fPIC -DPIC -o expr/.libs/flow_offload.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/fwd.lo expr/fwd.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/fwd.c -fPIC -DPIC -o expr/.libs/fwd.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/last.lo expr/last.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/last.c -fPIC -DPIC -o expr/.libs/last.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/limit.lo expr/limit.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/limit.c -fPIC -DPIC -o expr/.libs/limit.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/lookup.lo expr/lookup.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/lookup.c -fPIC -DPIC -o expr/.libs/lookup.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/immediate.lo expr/immediate.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/immediate.c -fPIC -DPIC -o expr/.libs/immediate.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/inner.lo expr/inner.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/inner.c -fPIC -DPIC -o expr/.libs/inner.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/match.lo expr/match.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/match.c -fPIC -DPIC -o expr/.libs/match.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/meta.lo expr/meta.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/meta.c -fPIC -DPIC -o expr/.libs/meta.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o rule.lo rule.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c rule.c -fPIC -DPIC -o .libs/rule.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/numgen.lo expr/numgen.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/numgen.c -fPIC -DPIC -o expr/.libs/numgen.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/tproxy.lo expr/tproxy.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/tproxy.c -fPIC -DPIC -o expr/.libs/tproxy.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/log.lo expr/log.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/log.c -fPIC -DPIC -o expr/.libs/log.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/fib.lo expr/fib.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/fib.c -fPIC -DPIC -o expr/.libs/fib.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/objref.lo expr/objref.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/objref.c -fPIC -DPIC -o expr/.libs/objref.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/payload.lo expr/payload.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/payload.c -fPIC -DPIC -o expr/.libs/payload.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/reject.lo expr/reject.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/reject.c -fPIC -DPIC -o expr/.libs/reject.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/quota.lo expr/quota.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/quota.c -fPIC -DPIC -o expr/.libs/quota.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/inner.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c: In function ‘nftnl_rule_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:134:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:177:6: note: (1) entry to ‘nftnl_rule_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:177:71: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:179:9: note: (3) calling ‘nftnl_rule_set_data’ from ‘nftnl_rule_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:110:5: note: (4) entry to ‘nftnl_rule_set_data’ <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:11: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:114:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:114:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:116:9: note: (7) following ‘case 3:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:133:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:134:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:134:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:146:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:177:6: note: (1) entry to ‘nftnl_rule_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:177:71: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:179:9: note: (3) calling ‘nftnl_rule_set_data’ from ‘nftnl_rule_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:110:5: note: (4) entry to ‘nftnl_rule_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:114:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:114:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:116:9: note: (7) following ‘case 6:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:145:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:146:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:146:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/rule.c:600:3: warning: Value stored to 'sep' is never read [deadcode.DeadStores] <--[clang]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/numgen.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/log.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/fib.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/payload.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/queue.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/masq.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/hash.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:6, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:11: <--[gcc]
In function ‘__list_add’,
inlined from ‘list_add_tail’ at ../include/linux_list.h:109:2,
inlined from ‘nftnl_set_elems_parse2’ at set_elem.c:593:2:
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux_list.h:83:20: warning: leak of ‘nftnl_set_elem_alloc()’ [CWE-401] [-Wanalyzer-malloc-leak] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c: In function ‘nftnl_set_elems_parse2’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:482:12: note: (1) entry to ‘nftnl_set_elems_parse2’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:488:13: note: (2) calling ‘nftnl_set_elem_alloc’ from ‘nftnl_set_elems_parse2’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:31:24: note: (3) entry to ‘nftnl_set_elem_alloc’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:35:13: note: (4) allocated here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:36:12: note: (5) assuming ‘s’ is non-NULL <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:36:12: note: (6) following ‘false’ branch (when ‘s’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:39:24: note: (7) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux_list.h:67:24: note: in definition of macro ‘INIT_LIST_HEAD’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:488:13: note: (8) returning to ‘nftnl_set_elems_parse2’ from ‘nftnl_set_elem_alloc’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:489:12: note: (9) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:492:15: note: (10) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:493:12: note: (11) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:496:15: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:496:12: note: (13) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:501:15: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:501:12: note: (15) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:505:15: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:505:12: note: (17) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:509:15: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:509:12: note: (19) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:515:15: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:515:12: note: (21) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:522:15: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:522:12: note: (23) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:539:15: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:539:12: note: (25) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:549:22: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:549:19: note: (27) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:567:15: note: (28) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:567:12: note: (29) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:583:15: note: (30) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:583:12: note: (31) following ‘false’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:593:9: note: (32) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:593:9: note: (33) inlined call to ‘list_add_tail’ from ‘nftnl_set_elems_parse2’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux_list.h:109:9: note: (34) inlined call to ‘__list_add’ from ‘list_add_tail’ <--[gcc]
In function ‘__list_add’,
inlined from ‘list_add_tail’ at ../include/linux_list.h:109:2,
inlined from ‘nftnl_set_elems_parse2’ at set_elem.c:593:2:
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux_list.h:83:20: note: (35) ‘nftnl_set_elem_alloc()’ leaks here; was allocated at (4) <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c: In function ‘nftnl_set_elem_get_u32’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:265:9: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:265:9: note: (1) dereference of NULL ‘nftnl_set_elem_get(s, (int)attr, & size)’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c: In function ‘nftnl_set_elem_get_u64’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:276:9: warning: dereference of NULL ‘0’ [CWE-476] [-Wanalyzer-null-dereference] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set_elem.c:276:9: note: (1) dereference of NULL ‘nftnl_set_elem_get(s, (int)attr, & size)’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/nat.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/obj/limit.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c: In function ‘nftnl_chain_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:236:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:11: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 3:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:235:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:236:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:236:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:239:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 4:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:238:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:239:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:239:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:242:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 5:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:241:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:242:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:242:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:245:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 6:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:244:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:245:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:245:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 7:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:247:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 7:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:247:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 7:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:247:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: (9) out-of-bounds read from byte 1 till byte 7 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:248:17: note: read of 7 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 8:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:250:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: (9) out-of-bounds read from byte 1 till byte 7 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: read of 7 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 8:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:250:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 8:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:250:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:251:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 9:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:253:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 9:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:253:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: (9) out-of-bounds read from byte 1 till byte 7 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: read of 7 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 9:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:253:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:254:17: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:257:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following �make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/target.lo expr/target.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/target.c -fPIC -DPIC -o expr/.libs/target.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/rt.lo expr/rt.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/rt.c -fPIC -DPIC -o expr/.libs/rt.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/queue.lo expr/queue.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/queue.c -fPIC -DPIC -o expr/.libs/queue.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/tunnel.lo expr/tunnel.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/tunnel.c -fPIC -DPIC -o expr/.libs/tunnel.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/redir.lo expr/redir.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/redir.c -fPIC -DPIC -o expr/.libs/redir.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/masq.lo expr/masq.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/masq.c -fPIC -DPIC -o expr/.libs/masq.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/socket.lo expr/socket.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/socket.c -fPIC -DPIC -o expr/.libs/socket.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/hash.lo expr/hash.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/hash.c -fPIC -DPIC -o expr/.libs/hash.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/synproxy.lo expr/synproxy.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/synproxy.c -fPIC -DPIC -o expr/.libs/synproxy.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o set_elem.lo set_elem.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c set_elem.c -fPIC -DPIC -o .libs/set_elem.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/osf.lo expr/osf.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/osf.c -fPIC -DPIC -o expr/.libs/osf.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/xfrm.lo expr/xfrm.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/xfrm.c -fPIC -DPIC -o expr/.libs/xfrm.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/counter.lo obj/counter.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/counter.c -fPIC -DPIC -o obj/.libs/counter.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/quota.lo obj/quota.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/quota.c -fPIC -DPIC -o obj/.libs/quota.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/nat.lo expr/nat.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/nat.c -fPIC -DPIC -o expr/.libs/nat.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/ct_helper.lo obj/ct_helper.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/ct_helper.c -fPIC -DPIC -o obj/.libs/ct_helper.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/limit.lo obj/limit.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/limit.c -fPIC -DPIC -o obj/.libs/limit.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o chain.lo chain.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c chain.c -fPIC -DPIC -o .libs/chain.o
�false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 1:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:256:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:257:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:257:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: (9) out-of-bounds read from byte 1 till byte 7 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: read of 7 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) allocated 4 bytes here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: (9) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) allocated 1 byte here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:277:33: note: (9) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (13) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘int32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (13) out-of-bounds read from byte 1 till byte 7 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 7 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 7 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (13) out-of-bounds read from byte 4 till byte 7 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 4 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │4 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │7 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────┐
│ read of ‘const char *’ (8 bytes) │
└──────────────────────────────────┘
^
│
│
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘data’ (type: ‘uint64_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 8 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (15) out-of-bounds read from byte 8 till byte 15 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │4 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │12 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │15 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │12 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (17) out-of-bounds read from byte 16 till byte 23 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭───┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │8 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰───────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │23 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │20 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │20 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (19) out-of-bounds read from byte 24 till byte 31 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │16 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │24 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │28 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │28 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (21) out-of-bounds read from byte 32 till byte 39 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │31 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │32 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │36 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │39 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (23) out-of-bounds read from byte 40 till byte 47 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │36 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │40 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │44 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │47 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (25) out-of-bounds read from byte 48 till byte 55 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │44 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴─────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 1 byte│ │55 bytes│ │⚠️ over-read of 8 bytes│
╰────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘int32_t’)│ │ after valid range │
└────────────────────────┘ └────────────────────────────────┘
├───────────┬────────────┤├────┬─────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │52 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:6: note: (1) entry to ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:335:73: note: (2) capacity: 8 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:337:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u64’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 8 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint64_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 8 bytes│ │48 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:6: note: (1) entry to ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:323:73: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:325:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (13) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (14) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (15) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (16) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (17) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (18) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (19) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (20) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (21) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (22) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (23) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (24) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (25) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (26) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: (27) out-of-bounds read from byte 56 till byte 63 but ‘data’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:43: note: read of 8 bytes from after the end of ‘data’ <--[gcc]
┌────────────────────────────────┐
│read of ‘const char *’ (8 bytes)│
└────────────────────────────────┘
^
│
│
┌─────────────────────────┐ ┌────────────────────────────────┐
│‘data’ (type: ‘uint32_t’)│ │ after valid range │
└─────────────────────────┘ └────────────────────────────────┘
├────────────┬────────────┤├────┬────┤├───────────────┬────────────────┤
│ │ │
╭──────┴──────╮ ╭────┴───╮ ╭───────────┴───────────╮
│size: 4 bytes│ │52 bytes│ │⚠️ over-read of 8 bytes│
╰─────────────╯ ╰────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:6: note: (1) entry to ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:329:72: note: (2) allocated 4 bytes here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:331:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_s32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (13) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: warning: allocated buffer size is not a multiple of the pointee's size [CWE-131] [-Wanalyzer-allocation-size] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) allocated 1 byte here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 12:’ branch... <--[gcc]
cc1: note: (8) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:287:20: note: (9) following ‘false’ branch... <--[gcc]
cc1: note: (10) ...to here
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:290:31: note: (11) following ‘true’ branch (when ‘len > i’)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (12) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:291:59: note: (13) assigned to ‘const char **’ here; ‘sizeof (const char *)’ is ‘8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:296:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 13:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:295:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:296:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:296:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:299:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:6: note: (1) entry to ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:341:71: note: (2) capacity: 1 byte <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:343:9: note: (3) calling ‘nftnl_chain_set_data’ from ‘nftnl_chain_set_u8’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:209:5: note: (4) entry to ‘nftnl_chain_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:216:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:218:9: note: (7) following ‘case 14:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:298:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:299:17: note: (9) out-of-bounds read from byte 1 till byte 3 but ‘data’ ends at byte 1 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/chain.c:299:17: note: read of 3 bytes from after the end of ‘data’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned int’ (4 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌────────────────────────┐┌────────────────────────────────────────────┐
│‘data’ (type: ‘uint8_t’)││ after valid range │
└────────────────────────┘└────────────────────────────────────────────┘
├───────────┬────────────┤├─────────────────────┬──────────────────────┤
│ │
╭──────┴─────╮ ╭───────────┴───────────╮
│size: 1 byte│ │⚠️ over-read of 3 bytes│
╰────────────╯ ╰───────────────────────╯
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o set.lo set.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c set.c -fPIC -DPIC -o .libs/set.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o expr/dynset.lo expr/dynset.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c expr/dynset.c -fPIC -DPIC -o expr/.libs/dynset.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/tunnel.lo obj/tunnel.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/tunnel.c -fPIC -DPIC -o obj/.libs/tunnel.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/synproxy.lo obj/synproxy.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/synproxy.c -fPIC -DPIC -o obj/.libs/synproxy.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/ct_timeout.lo obj/ct_timeout.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/ct_timeout.c -fPIC -DPIC -o obj/.libs/ct_timeout.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/secmark.lo obj/secmark.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/secmark.c -fPIC -DPIC -o obj/.libs/secmark.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c -o obj/ct_expect.lo obj/ct_expect.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -D_FILE_OFFSET_BITS=64 -D_REENTRANT -I../include -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -c obj/ct_expect.c -fPIC -DPIC -o obj/.libs/ct_expect.o
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wshadow -Wstrict-prototypes -Wformat=2 -Wwrite-strings -pipe -fvisibility=hidden -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wl,--version-script=./libnftnl.map -version-info 17:0:6 -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o libnftnl.la -rpath /usr/lib64 utils.lo batch.lo flowtable.lo common.lo gen.lo table.lo trace.lo chain.lo object.lo rule.lo set.lo set_elem.lo ruleset.lo udata.lo expr.lo expr_ops.lo expr/bitwise.lo expr/byteorder.lo expr/cmp.lo expr/range.lo expr/connlimit.lo expr/counter.lo expr/ct.lo expr/data_reg.lo expr/dup.lo expr/exthdr.lo expr/flow_offload.lo expr/fib.lo expr/fwd.lo expr/last.lo expr/limit.lo expr/log.lo expr/lookup.lo expr/dynset.lo expr/immediate.lo expr/inner.lo expr/match.lo expr/meta.lo expr/numgen.lo expr/nat.lo expr/tproxy.lo expr/objref.lo expr/payload.lo expr/queue.lo expr/quota.lo expr/reject.lo expr/rt.lo expr/target.lo expr/tunnel.lo expr/masq.lo expr/redir.lo expr/hash.lo expr/socket.lo expr/synproxy.lo expr/osf.lo expr/xfrm.lo obj/counter.lo obj/ct_helper.lo obj/quota.lo obj/tunnel.lo obj/limit.lo obj/synproxy.lo obj/ct_timeout.lo obj/secmark.lo obj/ct_expect.lo -lmnl
libtool: link: gcc -shared -fPIC -DPIC .libs/utils.o .libs/batch.o .libs/flowtable.o .libs/common.o .libs/gen.o .libs/table.o .libs/trace.o .libs/chain.o .libs/object.o .libs/rule.o .libs/set.o .libs/set_elem.o .libs/ruleset.o .libs/udata.o .libs/expr.o .libs/expr_ops.o expr/.libs/bitwise.o expr/.libs/byteorder.o expr/.libs/cmp.o expr/.libs/range.o expr/.libs/connlimit.o expr/.libs/counter.o expr/.libs/ct.o expr/.libs/data_reg.o expr/.libs/dup.o expr/.libs/exthdr.o expr/.libs/flow_offload.o expr/.libs/fib.o expr/.libs/fwd.o expr/.libs/last.o expr/.libs/limit.o expr/.libs/log.o expr/.libs/lookup.o expr/.libs/dynset.o expr/.libs/immediate.o expr/.libs/inner.o expr/.libs/match.o expr/.libs/meta.o expr/.libs/numgen.o expr/.libs/nat.o expr/.libs/tproxy.o expr/.libs/objref.o expr/.libs/payload.o expr/.libs/queue.o expr/.libs/quota.o expr/.libs/reject.o expr/.libs/rt.o expr/.libs/target.o expr/.libs/tunnel.o expr/.libs/masq.o expr/.libs/redir.o expr/.libs/hash.o expr/.libs/socket.o expr/.libs/synproxy.o expr/.libs/osf.o expr/.libs/xfrm.o obj/.libs/counter.o obj/.libs/ct_helper.o obj/.libs/quota.o obj/.libs/tunnel.o obj/.libs/limit.o obj/.libs/synproxy.o obj/.libs/ct_timeout.o obj/.libs/secmark.o obj/.libs/ct_expect.o -lmnl -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -O2 -flto=auto -g -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -mtls-dialect=gnu2 -mno-omit-leaf-frame-pointer -Wl,--version-script=./libnftnl.map -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,pack-relative-relocs -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -Wl,-soname -Wl,libnftnl.so.11 -o .libs/libnftnl.so.11.6.0
libtool: link: (cd ".libs" && rm -f "libnftnl.so.11" && ln -s "libnftnl.so.11.6.0" "libnftnl.so.11")
libtool: link: (cd ".libs" && rm -f "libnftnl.so" && ln -s "libnftnl.so.11.6.0" "libnftnl.so")
libtool: link: ( cd ".libs" && rm -f "libnftnl.la" && ln -s "../libnftnl.la" "libnftnl.la" )
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
Making all in include
Making all in libnftnl
make[3]: Nothing to be done for 'all'.
Making all in linux
Making all in netfilter
make[4]: Nothing to be done for 'all'.
make[4]: Nothing to be done for 'all-am'.
make[3]: Nothing to be done for 'all-am'.
Making all in examples
make[2]: Nothing to be done for 'all'.
Making all in tests
make[2]: Nothing to be done for 'all'.
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c: In function ‘nftnl_set_set_data’: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:165:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:244:6: note: (1) entry to ‘nftnl_set_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:244:69: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:246:9: note: (3) calling ‘nftnl_set_set_data’ from ‘nftnl_set_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:139:5: note: (4) entry to ‘nftnl_set_set_data’ <--[gcc]
In file included from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/internal.h:7, <--[gcc]
from /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:11: <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:145:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:145:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:147:9: note: (7) following ‘case 15:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:164:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:165:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:165:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:208:17: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:244:6: note: (1) entry to ‘nftnl_set_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:244:69: note: (2) capacity: 4 bytes <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:246:9: note: (3) calling ‘nftnl_set_set_data’ from ‘nftnl_set_set_u32’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:139:5: note: (4) entry to ‘nftnl_set_set_data’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:39:12: note: (5) following ‘false’ branch (when ‘data’ is non-NULL)... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:145:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/utils.h:41:28: note: (6) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:145:9: note: in expansion of macro ‘nftnl_assert_validate’ <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:147:9: note: (7) following ‘case 11:’ branch... <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:207:9: note: (8) ...to here <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:208:17: note: (9) out-of-bounds read from byte 4 till byte 7 but ‘val’ ends at byte 4 <--[gcc]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/set.c:208:17: note: read of 4 bytes from after the end of ‘val’ <--[gcc]
┌──────────────────────────────────────────────────────────────────────┐
│ read of ‘unsigned long’ (8 bytes) │
└──────────────────────────────────────────────────────────────────────┘
^ ^
│ │
│ │
┌──────────────────────────────────┐┌──────────────────────────────────┐
│ ‘val’ (type: ‘uint32_t’) ││ after valid range │
└──────────────────────────────────┘└──────────────────────────────────┘
├────────────────┬─────────────────┤├────────────────┬─────────────────┤
│ │
╭──────┴──────╮ ╭───────────┴───────────╮
│size: 4 bytes│ │⚠️ over-read of 4 bytes│
╰─────────────╯ ╰───────────────────────╯
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/expr/dynset.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/obj/tunnel.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/obj/ct_timeout.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src/obj/ct_expect.c:0: information: normalCheckLevelMaxBranches(CWE-0): Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. <--[cppcheck]
+ RPM_EC=0
++ jobs -p
+ exit 0
Finish: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bc --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\'\\""']
Finish: run
>>> 2024-07-03 15:49:53 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "rpmbuild --nocheck"
>>> 2024-07-03 15:49:54 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--chroot" "/bin/su mockbuild -l -c \"PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\\$PATH CSWRAP_CAP_FILE=\\\$'/builddir/cswrap-capture.err' CSWRAP_TIMEOUT=\\\$'30' CSWRAP_TIMEOUT_FOR=\\\$'::clang:clang++:cppcheck:gcc' CSWRAP_ADD_CFLAGS=\\\$'-Wno-unknown-pragmas' CSWRAP_DEL_CFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' CSWRAP_ADD_CXXFLAGS=\\\$'' CSWRAP_DEL_CXXFLAGS=\\\$'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register' sh -c \\\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec '--define' '_unpackaged_files_terminate_build 0' '--define' 'apidocs 0' '--define' 'with_publican 0' '--without' 'docs' '--without' 'langpacks' '--nocheck' '--define' 'libguestfs_runtests 0' '--define' 'runselftest 0' '--without' 'testsuite'\\\"\""
INFO: mock.py version 5.6 starting (python version = 3.9.19, NVR = mock-5.6-1.el9), args: /usr/libexec/mock/mock -r fedora-41-x86_64 --plugin-option=tmpfs:keep_mounted=True --config-opts=print_main_output=True --chroot '/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\$PATH CSWRAP_CAP_FILE=\$'"'"'/builddir/cswrap-capture.err'"'"' CSWRAP_TIMEOUT=\$'"'"'30'"'"' CSWRAP_TIMEOUT_FOR=\$'"'"'::clang:clang++:cppcheck:gcc'"'"' CSWRAP_ADD_CFLAGS=\$'"'"'-Wno-unknown-pragmas'"'"' CSWRAP_DEL_CFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' CSWRAP_ADD_CXXFLAGS=\$'"'"''"'"' CSWRAP_DEL_CXXFLAGS=\$'"'"'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register'"'"' sh -c \"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec '"'"'--define'"'"' '"'"'_unpackaged_files_terminate_build 0'"'"' '"'"'--define'"'"' '"'"'apidocs 0'"'"' '"'"'--define'"'"' '"'"'with_publican 0'"'"' '"'"'--without'"'"' '"'"'docs'"'"' '"'"'--without'"'"' '"'"'langpacks'"'"' '"'"'--nocheck'"'"' '"'"'--define'"'"' '"'"'libguestfs_runtests 0'"'"' '"'"'--define'"'"' '"'"'runselftest 0'"'"' '"'"'--without'"'"' '"'"'testsuite'"'"'\""'
Start(bootstrap): init plugins
INFO: selinux enabled
Finish(bootstrap): init plugins
Start: init plugins
INFO: selinux enabled
Finish: init plugins
INFO: Signal handler active
Start: run
Mock Version: 5.6
INFO: Mock Version: 5.6
Start(bootstrap): chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
INFO: Running in chroot: ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""']
Start: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""']
setting SOURCE_DATE_EPOCH=1719878400
Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.KDNdFz
+ umask 022
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ '[' /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT '!=' / ']'
+ rm -rf /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT
++ dirname /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT
+ mkdir -p /builddir/build/BUILD/libnftnl-1.2.6-build
+ mkdir /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT
+ CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CFLAGS
+ CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer '
+ export CXXFLAGS
+ FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FFLAGS
+ FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules '
+ export FCFLAGS
+ VALAFLAGS=-g
+ export VALAFLAGS
+ RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn'
+ export RUSTFLAGS
+ LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes '
+ export LDFLAGS
+ LT_SYS_LIBRARY_PATH=/usr/lib64:
+ export LT_SYS_LIBRARY_PATH
+ CC=gcc
+ export CC
+ CXX=g++
+ export CXX
+ cd libnftnl-1.2.6
+ /usr/bin/make install DESTDIR=/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT 'INSTALL=/usr/bin/install -p'
Making install in src
make[1]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
/usr/bin/mkdir -p '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64'
/bin/sh ../libtool --mode=install /usr/bin/install -p libnftnl.la '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64'
libtool: install: /usr/bin/install -p .libs/libnftnl.so.11.6.0 /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64/libnftnl.so.11.6.0
libtool: install: (cd /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64 && { ln -s -f libnftnl.so.11.6.0 libnftnl.so.11 || { rm -f libnftnl.so.11 && ln -s libnftnl.so.11.6.0 libnftnl.so.11; }; })
libtool: install: (cd /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64 && { ln -s -f libnftnl.so.11.6.0 libnftnl.so || { rm -f libnftnl.so && ln -s libnftnl.so.11.6.0 libnftnl.so; }; })
libtool: install: /usr/bin/install -p .libs/libnftnl.lai /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64/libnftnl.la
libtool: warning: remember to run 'libtool --finish /usr/lib64'
make[2]: Nothing to be done for 'install-data-am'.
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
make[1]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/src'
Making install in include
make[1]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
Making install in libnftnl
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/libnftnl'
make[3]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/libnftnl'
make[3]: Nothing to be done for 'install-exec-am'.
/usr/bin/mkdir -p '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/include/libnftnl'
/usr/bin/install -p -m 644 batch.h table.h trace.h chain.h object.h rule.h expr.h set.h flowtable.h ruleset.h common.h udata.h gen.h '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/include/libnftnl'
make[3]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/libnftnl'
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/libnftnl'
Making install in linux
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
Making install in netfilter
make[3]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux/netfilter'
make[4]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux/netfilter'
make[4]: Nothing to be done for 'install-exec-am'.
make[4]: Nothing to be done for 'install-data-am'.
make[4]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux/netfilter'
make[3]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux/netfilter'
make[3]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
make[4]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
make[4]: Nothing to be done for 'install-exec-am'.
make[4]: Nothing to be done for 'install-data-am'.
make[4]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
make[3]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include/linux'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
make[3]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
make[3]: Nothing to be done for 'install-exec-am'.
make[3]: Nothing to be done for 'install-data-am'.
make[3]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
make[1]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/include'
Making install in examples
make[1]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/examples'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/examples'
make[2]: Nothing to be done for 'install-exec-am'.
make[2]: Nothing to be done for 'install-data-am'.
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/examples'
make[1]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/examples'
Making install in tests
make[1]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/tests'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/tests'
make[2]: Nothing to be done for 'install-exec-am'.
make[2]: Nothing to be done for 'install-data-am'.
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/tests'
make[1]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/tests'
make[1]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6'
make[2]: Entering directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6'
make[2]: Nothing to be done for 'install-exec-am'.
/usr/bin/mkdir -p '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64/pkgconfig'
/usr/bin/install -p -m 644 libnftnl.pc '/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/lib64/pkgconfig'
make[2]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6'
make[1]: Leaving directory '/builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6'
+ find /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT -name '*.la' -exec rm -f '{}' ';'
+ /usr/bin/find-debuginfo -j8 --strict-build-id -m -i --build-id-seed 1.2.6-6.fc41 --unique-debug-suffix -1.2.6-6.fc41.x86_64 --unique-debug-src-base libnftnl-1.2.6-6.fc41.x86_64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 110000000 -S debugsourcefiles.list /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6
find-debuginfo: starting
Extracting debug info from 1 files
DWARF-compressing 1 files
sepdebugcrcfix: Updated 1 CRC32s, 0 CRC32s did match.
Creating .debug symlinks for symlinks to ELF files
Copying sources found by 'debugedit -l' to /usr/src/debug/libnftnl-1.2.6-6.fc41.x86_64
1197 blocks
find-debuginfo: done
+ /usr/lib/rpm/check-buildroot
+ /usr/lib/rpm/redhat/brp-ldconfig
+ /usr/lib/rpm/brp-compress
+ /usr/lib/rpm/redhat/brp-strip-lto /usr/bin/strip
+ /usr/lib/rpm/brp-strip-static-archive /usr/bin/strip
+ /usr/lib/rpm/check-rpaths
+ /usr/lib/rpm/redhat/brp-mangle-shebangs
+ /usr/lib/rpm/brp-remove-la-files
+ env /usr/lib/rpm/redhat/brp-python-bytecompile '' 1 0 -j8
+ /usr/lib/rpm/redhat/brp-python-hardlink
+ /usr/bin/add-determinism --brp -j8 /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT
Scanned 20 directories and 110 files,
processed 0 inodes,
0 modified (0 replaced + 0 rewritten),
0 unsupported format, 0 errors
Reading /builddir/build/BUILD/libnftnl-1.2.6-build/SPECPARTS/rpm-debuginfo.specpart
Processing files: libnftnl-1.2.6-6.fc41.x86_64
Executing(%doc): /bin/sh -e /var/tmp/rpm-tmp.4yw3Jo
+ umask 022
+ cd /builddir/build/BUILD/libnftnl-1.2.6-build
+ cd libnftnl-1.2.6
+ DOCDIR=/builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/share/doc/libnftnl
+ export LC_ALL=C.UTF-8
+ LC_ALL=C.UTF-8
+ export DOCDIR
+ /usr/bin/mkdir -p /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/share/doc/libnftnl
+ cp -pr /builddir/build/BUILD/libnftnl-1.2.6-build/libnftnl-1.2.6/COPYING /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT/usr/share/doc/libnftnl
+ RPM_EC=0
++ jobs -p
+ exit 0
Provides: libnftnl = 1.2.6-6.fc41 libnftnl(x86-64) = 1.2.6-6.fc41 libnftnl.so.11()(64bit) libnftnl.so.11(LIBNFTNL_11)(64bit) libnftnl.so.11(LIBNFTNL_12)(64bit) libnftnl.so.11(LIBNFTNL_13)(64bit) libnftnl.so.11(LIBNFTNL_14)(64bit) libnftnl.so.11(LIBNFTNL_15)(64bit) libnftnl.so.11(LIBNFTNL_16)(64bit) libnftnl.so.11(LIBNFTNL_17)(64bit)
Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
Requires: libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_ABI_DT_RELR)(64bit) libmnl.so.0()(64bit) libmnl.so.0(LIBMNL_1.0)(64bit) rtld(GNU_HASH)
Processing files: libnftnl-devel-1.2.6-6.fc41.x86_64
Provides: libnftnl-devel = 1.2.6-6.fc41 libnftnl-devel(x86-64) = 1.2.6-6.fc41 pkgconfig(libnftnl) = 1.2.6
Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
Requires: /usr/bin/pkg-config libnftnl.so.11()(64bit) pkgconfig(libmnl)
Processing files: libnftnl-debugsource-1.2.6-6.fc41.x86_64
Provides: libnftnl-debugsource = 1.2.6-6.fc41 libnftnl-debugsource(x86-64) = 1.2.6-6.fc41
Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
Processing files: libnftnl-debuginfo-1.2.6-6.fc41.x86_64
Provides: debuginfo(build-id) = 3c188777d10ad17cd9c292381d34052b9017e781 libnftnl-debuginfo = 1.2.6-6.fc41 libnftnl-debuginfo(x86-64) = 1.2.6-6.fc41 libnftnl.so.11.6.0-1.2.6-6.fc41.x86_64.debug()(64bit)
Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
Recommends: libnftnl-debugsource(x86-64) = 1.2.6-6.fc41
Checking for unpackaged file(s): /usr/lib/rpm/check-files /builddir/build/BUILD/libnftnl-1.2.6-build/BUILDROOT
Finish: chroot ['/bin/su mockbuild -l -c "PATH=/usr/lib64/cscppc:/usr/lib64/csclng:/usr/lib64/csgcca:/usr/lib64/cswrap:\\$PATH CSWRAP_CAP_FILE=\\$\'/builddir/cswrap-capture.err\' CSWRAP_TIMEOUT=\\$\'30\' CSWRAP_TIMEOUT_FOR=\\$\'::clang:clang++:cppcheck:gcc\' CSWRAP_ADD_CFLAGS=\\$\'-Wno-unknown-pragmas\' CSWRAP_DEL_CFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' CSWRAP_ADD_CXXFLAGS=\\$\'\' CSWRAP_DEL_CXXFLAGS=\\$\'-Werror*:-fdiagnostics-color*:-no-canonical-prefixes:-Wno-error=deprecated-register\' sh -c \\"rpmbuild -bi --nodeps --short-circuit /builddir/build/SPECS/libnftnl.spec \'--define\' \'_unpackaged_files_terminate_build 0\' \'--define\' \'apidocs 0\' \'--define\' \'with_publican 0\' \'--without\' \'docs\' \'--without\' \'langpacks\' \'--nocheck\' \'--define\' \'libguestfs_runtests 0\' \'--define\' \'runselftest 0\' \'--without\' \'testsuite\'\\""']
Finish: run
>>> 2024-07-03 15:49:56 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--chroot" "/usr/share/csmock/scripts/run-shellcheck.sh /builddir/build/BUILDROOT > /builddir/shellcheck-capture.err"
>>> 2024-07-03 15:49:57 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'tar -c --remove-files '/builddir/cswrap-capture.err' '/builddir/shellcheck-capture.err'' | tar -xC '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/raw-results'"
tar: Removing leading `/' from member names
tar: Removing leading `/' from hard link targets
>>> 2024-07-03 15:49:58 "cat '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/raw-results/builddir/cswrap-capture.err' | csgrep --mode=json --quiet --path '^/builddir/build/BUILD/' --remove-duplicates | csgrep --mode=json --invert-match --checker CLANG_WARNING --event error | csgrep --mode=json --invert-match --checker CPPCHECK_WARNING --event 'cppcheckError|internalAstError|preprocessorErrorDirective|syntaxError|unknownMacro' | csgrep --mode=json --invert-match --checker COMPILER_WARNING --event error > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/uni-results/cswrap-capture.js'"
>>> 2024-07-03 15:49:58 "csgrep --quiet '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/raw-results/builddir/shellcheck-capture.err' | csgrep --invert-match --event '^note|warning\\[SC1090\\]' > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/uni-results/shellcheck-capture.err'"
scan.ini: time-finished = 2024-07-03 15:49:58
scan.ini: exit-code = 0
>>> 2024-07-03 15:49:58 "cslinker --quiet --cwelist '/usr/share/csmock/cwe-map.csv' --inifile '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan.ini' '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/uni-results'/* > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/scan-results-all.js'"
>>> 2024-07-03 15:49:58 "'/usr/bin/mock' '-r' 'fedora-41-x86_64' '--plugin-option=tmpfs:keep_mounted=True' '--config-opts=print_main_output=True' '--quiet' '--shell' 'csgrep --mode=json --embed-context 3 '--warning-rate-limit=1024' '--limit-msg-len=512'' <'/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/scan-results-all.js' >'/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/scan-results-all.js.tmp'"
>>> 2024-07-03 15:49:59 "/usr/bin/mock" "-r" "fedora-41-x86_64" "--plugin-option=tmpfs:keep_mounted=True" "--config-opts=print_main_output=True" "--quiet" "--clean"
>>> 2024-07-03 15:50:01 "cat '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/scan-results-all.js' | sed 's|/builddir/build/BUILDROOT/[^/]*/|/builddir/build/BUILD//|' | csgrep --mode=json --path '^/builddir/build/BUILD/' --strip-path-prefix /builddir/build/BUILD/ | csgrep --mode=json --invert-match --path '^ksh-.*[0-9]+\\.c\$' | csgrep --mode=json --invert-match --path 'CMakeFiles/CMakeTmp|conftest.c' | cssort --key=path > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.js'"
>>> 2024-07-03 15:50:01 "cat '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/scan-results-all.js' | sed 's|/builddir/build/BUILDROOT/[^/]*/|/builddir/build/BUILD//|' | csgrep --mode=json --strip-path-prefix /builddir/build/BUILD/ | csdiff --show-internal '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.js' - | cssort > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.js'"
>>> 2024-07-03 15:50:01 "csgrep --mode=grep --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.js' > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.err'"
>>> 2024-07-03 15:50:01 "csgrep --mode=json --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.js' | cshtml - > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.html'"
>>> 2024-07-03 15:50:01 "csgrep --mode=evtstat --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results.js' | tee '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/debug/suppressed-results-summary.txt'"
>>> 2024-07-03 15:50:01 "csgrep --mode=grep --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.js' > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.err'"
>>> 2024-07-03 15:50:01 "csgrep --mode=json --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.js' | cshtml - > '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.html'"
>>> 2024-07-03 15:50:01 "csgrep --mode=evtstat --invert-match --event \"internal warning\" --prune-events=1 '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results.js' | tee '/tmp/csmockv3a811is/libnftnl-1.2.6-6.fc41/scan-results-summary.txt'"
1 CLANG_WARNING warning[core.NonNullParamChecker]
1 CLANG_WARNING warning[deadcode.DeadStores]
1 CPPCHECK_WARNING error[overlappingWriteUnion]
29 CPPCHECK_WARNING information[normalCheckLevelMaxBranches]
1 CPPCHECK_WARNING warning[nullPointer]
4 GCC_ANALYZER_WARNING warning[-Wanalyzer-allocation-size]
1 GCC_ANALYZER_WARNING warning[-Wanalyzer-malloc-leak]
1 GCC_ANALYZER_WARNING warning[-Wanalyzer-null-argument]
2 GCC_ANALYZER_WARNING warning[-Wanalyzer-null-dereference]
28 GCC_ANALYZER_WARNING warning[-Wanalyzer-out-of-bounds]
<<< 2024-07-03 15:50:01 csmock exit code: 0