Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_freebsd.c: scope_hint: In function 'clone_runtime_spec_schema_config_freebsd'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_freebsd.c:1077:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_freebsd_jail(*src.jail)'
# 1075|       if (ret == NULL)
# 1076|         return NULL;
# 1077|->     if (src->parent)
# 1078|         {
# 1079|           ret->parent = strdup (src->parent);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:1228:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_resources_cpu(*src.cpu)'
# 1226|       if (ret == NULL)
# 1227|         return NULL;
# 1228|->     if (src->cpus)
# 1229|         {
# 1230|           ret->cpus = strdup (src->cpus);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3013:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_seccomp(*src.seccomp)'
# 3011|       if (ret == NULL)
# 3012|         return NULL;
# 3013|->     if (src->default_action)
# 3014|         {
# 3015|           ret->default_action = strdup (src->default_action);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3364:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_intel_rdt(*src.intel_rdt)'
# 3362|       if (ret == NULL)
# 3363|         return NULL;
# 3364|->     if (src->clos_id)
# 3365|         {
# 3366|           ret->clos_id = strdup (src->clos_id);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_linux.c:3626:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_linux_memory_policy(*src.memory_policy)'
# 3624|       if (ret == NULL)
# 3625|         return NULL;
# 3626|->     if (src->mode)
# 3627|         {
# 3628|           ret->mode = strdup (src->mode);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c: scope_hint: In function 'clone_runtime_spec_schema_config_solaris'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:142:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_solaris_capped_cpu(*src.capped_cpu)'
#  140|       if (ret == NULL)
#  141|         return NULL;
#  142|->     if (src->ncpus)
#  143|         {
#  144|           ret->ncpus = strdup (src->ncpus);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c: scope_hint: In function 'clone_runtime_spec_schema_config_solaris'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:308:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_solaris_capped_memory(*src.capped_memory)'
#  306|       if (ret == NULL)
#  307|         return NULL;
#  308|->     if (src->physical)
#  309|         {
#  310|           ret->physical = strdup (src->physical);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_solaris.c:314:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  312|             return NULL;
#  313|         }
#  314|->     if (src->swap)
#  315|         {
#  316|           ret->swap = strdup (src->swap);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c: scope_hint: In function 'clone_runtime_spec_schema_config_vm'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:214:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_hypervisor(*src.hypervisor)'
#  212|       if (ret == NULL)
#  213|         return NULL;
#  214|->     if (src->path)
#  215|         {
#  216|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c: scope_hint: In function 'clone_runtime_spec_schema_config_vm'
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:468:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_kernel(*src.kernel)'
#  466|       if (ret == NULL)
#  467|         return NULL;
#  468|->     if (src->path)
#  469|         {
#  470|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:490:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  488|             }
#  489|         }
#  490|->     if (src->initrd)
#  491|         {
#  492|           ret->initrd = strdup (src->initrd);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:668:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_image(*src.image)'
#  666|       if (ret == NULL)
#  667|         return NULL;
#  668|->     if (src->path)
#  669|         {
#  670|           ret->path = strdup (src->path);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:674:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  672|             return NULL;
#  673|         }
#  674|->     if (src->format)
#  675|         {
#  676|           ret->format = strdup (src->format);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:1075:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_vm_hw_config(*src.hw_config)'
# 1073|       if (ret == NULL)
# 1074|         return NULL;
# 1075|->     if (src->device_tree)
# 1076|         {
# 1077|           ret->device_tree = strdup (src->device_tree);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_windows.c:1333:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 1331|             return NULL;
# 1332|         }
# 1333|->     if (src->network_namespace)
# 1334|         {
# 1335|           ret->network_namespace = strdup (src->network_namespace);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
crun-HEAD/libocispec/src/ocispec/runtime_spec_schema_config_windows.c:1525:12: warning[-Wanalyzer-malloc-leak]: leak of 'clone_runtime_spec_schema_config_windows_hyperv(*src.hyperv)'
# 1523|       if (ret == NULL)
# 1524|         return NULL;
# 1525|->     if (src->utility_vm_path)
# 1526|         {
# 1527|           ret->utility_vm_path = strdup (src->utility_vm_path);

Scan Properties

analyzer-version-clippy1.91.1
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer15.2.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.91.1
diffbase-analyzer-version-cppcheck2.18.3
diffbase-analyzer-version-gcc15.2.1
diffbase-analyzer-version-gcc-analyzer15.2.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-124.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namecrun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0
diffbase-store-results-to/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.tar.xz
diffbase-time-created2025-12-13 08:03:07
diffbase-time-finished2025-12-13 08:08:24
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp50v9ifbq/crun-1.25.1-1.20251213074810943741.pr1929.24.gd833dac0.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251212.103901.gf32c634-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-124.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namecrun-1.25.1-1.20251212141234614018.main.23.gaca68bb3
store-results-to/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.tar.xz
time-created2025-12-13 07:56:10
time-finished2025-12-13 08:02:48
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp38n7xi4l/crun-1.25.1-1.20251212141234614018.main.23.gaca68bb3.src.rpm'
tool-versioncsmock-3.8.3.20251212.103901.gf32c634-1.el9