Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_freebsd.c: scope_hint: In function 'clone_runtime_spec_schema_config_freebsd'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_freebsd.c:1067:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_freebsd_jail(*src.jail)'
# 1065|       if (ret == NULL)
# 1066|         return NULL;
# 1067|->     if (src->parent != NULL)
# 1068|         {
# 1069|           ret->parent = strdup (src->parent);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1230:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_resources_cpu(*src.cpu)'
# 1228|       if (ret == NULL)
# 1229|         return NULL;
# 1230|->     if (src->cpus != NULL)
# 1231|         {
# 1232|           ret->cpus = strdup (src->cpus);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3012:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_seccomp(*src.seccomp)'
# 3010|       if (ret == NULL)
# 3011|         return NULL;
# 3012|->     if (src->default_action != NULL)
# 3013|         {
# 3014|           ret->default_action = strdup (src->default_action);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3361:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_intel_rdt(*src.intel_rdt)'
# 3359|       if (ret == NULL)
# 3360|         return NULL;
# 3361|->     if (src->clos_id != NULL)
# 3362|         {
# 3363|           ret->clos_id = strdup (src->clos_id);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3622:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_memory_policy(*src.memory_policy)'
# 3620|       if (ret == NULL)
# 3621|         return NULL;
# 3622|->     if (src->mode != NULL)
# 3623|         {
# 3624|           ret->mode = strdup (src->mode);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c: scope_hint: In function 'clone_runtime_spec_schema_config_solaris'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:141:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_solaris_capped_cpu(*src.capped_cpu)'
#  139|       if (ret == NULL)
#  140|         return NULL;
#  141|->     if (src->ncpus != NULL)
#  142|         {
#  143|           ret->ncpus = strdup (src->ncpus);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c: scope_hint: In function 'clone_runtime_spec_schema_config_solaris'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:306:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_solaris_capped_memory(*src.capped_memory)'
#  304|       if (ret == NULL)
#  305|         return NULL;
#  306|->     if (src->physical != NULL)
#  307|         {
#  308|           ret->physical = strdup (src->physical);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:312:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  310|             return NULL;
#  311|         }
#  312|->     if (src->swap != NULL)
#  313|         {
#  314|           ret->swap = strdup (src->swap);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c: scope_hint: In function 'clone_runtime_spec_schema_config_vm'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:213:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_hypervisor(*src.hypervisor)'
#  211|       if (ret == NULL)
#  212|         return NULL;
#  213|->     if (src->path != NULL)
#  214|         {
#  215|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c: scope_hint: In function 'clone_runtime_spec_schema_config_vm'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:466:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_kernel(*src.kernel)'
#  464|       if (ret == NULL)
#  465|         return NULL;
#  466|->     if (src->path != NULL)
#  467|         {
#  468|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:488:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  486|           }
#  487|           }
#  488|->     if (src->initrd != NULL)
#  489|         {
#  490|           ret->initrd = strdup (src->initrd);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:665:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_image(*src.image)'
#  663|       if (ret == NULL)
#  664|         return NULL;
#  665|->     if (src->path != NULL)
#  666|         {
#  667|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:671:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  669|             return NULL;
#  670|         }
#  671|->     if (src->format != NULL)
#  672|         {
#  673|           ret->format = strdup (src->format);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:1072:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_hw_config(*src.hw_config)'
# 1070|       if (ret == NULL)
# 1071|         return NULL;
# 1072|->     if (src->device_tree != NULL)
# 1073|         {
# 1074|           ret->device_tree = strdup (src->device_tree);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_windows.c:1326:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 1324|             return NULL;
# 1325|         }
# 1326|->     if (src->network_namespace != NULL)
# 1327|         {
# 1328|           ret->network_namespace = strdup (src->network_namespace);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_windows.c:1517:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_windows_hyperv(*src.hyperv)'
# 1515|       if (ret == NULL)
# 1516|         return NULL;
# 1517|->     if (src->utility_vm_path != NULL)
# 1518|         {
# 1519|           ret->utility_vm_path = strdup (src->utility_vm_path);

Scan Properties

analyzer-version-clippy1.91.1
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer15.2.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.91.1
diffbase-analyzer-version-cppcheck2.18.3
diffbase-analyzer-version-gcc15.2.1
diffbase-analyzer-version-gcc-analyzer15.2.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-124.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namecrun-1.25.1-1.20251212141234614018.main.23.gaca68bb3
diffbase-store-results-to/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.tar.xz
diffbase-time-created2025-12-13 07:56:10
diffbase-time-finished2025-12-13 08:02:48
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251212.103901.gf32c634-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-124.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namecrun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0
store-results-to/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.tar.xz
time-created2025-12-13 08:03:07
time-finished2025-12-13 08:08:24
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.src.rpm'
tool-versioncsmock-3.8.3.20251212.103901.gf32c634-1.el9