sssd-2.12.0-99.20260109124307970413.pr8344.339.gad160b2b6

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
sssd-2.12.0/src/db/sysdb_ops.c: scope_hint: In function 'sysdb_search_entry.part.0'
sssd-2.12.0/src/db/sysdb_ops.c:322:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*_msgs'
sssd-2.12.0/src/db/sysdb_private.h:128: included_from: Included from here.
sssd-2.12.0/src/db/sysdb_ops.c:25: included_from: Included from here.
sssd-2.12.0/src/db/sysdb_ops.c:288:15: note: in expansion of macro 'sysdb_error_to_errno'
#  320|       }
#  321|   
#  322|->     return sysdb_merge_msg_list_ts_attrs(sysdb, *_msgs_count, *_msgs,
#  323|                                            attrs);
#  324|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
sssd-2.12.0/src/db/sysdb_search.c: scope_hint: In function 'mpg_convert'
sssd-2.12.0/src/db/sysdb_search.c:1038:15: warning[-Wanalyzer-null-dereference]: dereference of NULL 'val'
# 1036|   
# 1037|       /* yes, convert */
# 1038|->     val->data = (uint8_t *)talloc_strdup(msg, SYSDB_GROUP_CLASS);
# 1039|       if (val->data == NULL) return ENOMEM;
# 1040|       val->length = strlen(SYSDB_GROUP_CLASS);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_config_init'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:195:11: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  193|       }
#  194|   
#  195|->     ret = krb5_unparse_name_flags(kctx, princ, 0, &username);
#  196|       if (ret != 0) {
#  197|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:195:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
#  193|       }
#  194|   
#  195|->     ret = krb5_unparse_name_flags(kctx, princ, 0, &username);
#  196|       if (ret != 0) {
#  197|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:201:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  199|   
#  200|       config->username = strdup(username);
#  201|->     krb5_free_unparsed_name(kctx, username);
#  202|       if (config->username == NULL) {
#  203|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:201:5: warning[-Wanalyzer-malloc-leak]: leak of 'config'
#  199|   
#  200|       config->username = strdup(username);
#  201|->     krb5_free_unparsed_name(kctx, username);
#  202|       if (config->username == NULL) {
#  203|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_set_cookie'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:244:12: warning[-Wanalyzer-malloc-leak]: leak of 'blob'
sssd-2.12.0/src/util/util.h:53: included_from: Included from here.
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:31: included_from: Included from here.
sssd-2.12.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:237:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_set_cookie'
#  242|       cookie.length = len;
#  243|   
#  244|->     return cb->set_cookie(context, rock, pa_type, &cookie);
#  245|   }
#  246|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_get_complete_attr'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:313:16: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)data.length)'
#  311|       memindex = 0;
#  312|       do {
#  313|->         rmsg = krad_packet_get_attr(rres, attr, i);
#  314|           if (rmsg != NULL) {
#  315|               memcpy(&data.data[memindex], rmsg->data, rmsg->length);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:427:11: warning[-Wanalyzer-malloc-leak]: leak of 'client'
#  425|       memset(client, 0, sizeof(struct sss_radiuskdc_client));
#  426|   
#  427|->     ret = krad_client_new(kctx, vctx, &client->client);
#  428|       if (ret != 0) {
#  429|           goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_client_init'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:427:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  425|       memset(client, 0, sizeof(struct sss_radiuskdc_client));
#  426|   
#  427|->     ret = krad_client_new(kctx, vctx, &client->client);
#  428|       if (ret != 0) {
#  429|           goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:432:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  430|       }
#  431|   
#  432|->     ret = krad_attrset_new(kctx, &client->attrs);
#  433|       if (ret != 0) {
#  434|           goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:444:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  442|       data.data = hostname;
#  443|       data.length = strlen(hostname);
#  444|->     ret = krad_attrset_add(client->attrs, krad_attr_name2num("NAS-Identifier"),
#  445|                              &data);
#  446|       if (ret != 0) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:450:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  448|       }
#  449|   
#  450|->     ret = krad_attrset_add_number(client->attrs, krad_attr_name2num("Service-Type"),
#  451|                                     KRAD_SERVICE_TYPE_AUTHENTICATE_ONLY);
#  452|       if (ret != 0) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:458:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  456|       data.data = config->username;
#  457|       data.length = strlen(config->username);
#  458|->     ret = krad_attrset_add(client->attrs, krad_attr_name2num("User-Name"),
#  459|                              &data);
#  460|       if (ret != 0) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_challenge_init'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:505:47: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  503|   
#  504|       state->client = sss_radiuskdc_client_init(kctx,
#  505|->                                               cb->event_context(kctx, rock),
#  506|                                                 config);
#  507|       if (state->client == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_verify_free.part.0'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:522:5: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  520|       }
#  521|   
#  522|->     sss_string_array_free(state->indicators);
#  523|       sss_radiuskdc_client_free(state->client);
#  524|       free(state);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def17]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_verify_init'
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:552:25: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  550|       state->arg = arg;
#  551|   
#  552|->     state->indicators = sss_string_array_copy(indicators);
#  553|       if (state->indicators == NULL) {
#  554|           sss_radiuskdc_verify_free(state);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def18]
sssd-2.12.0/src/krb5_plugin/common/radius_kdcpreauth.c:559:47: warning[-Wanalyzer-malloc-leak]: leak of 'state'
#  557|   
#  558|       state->client = sss_radiuskdc_client_init(kctx,
#  559|->                                               cb->event_context(kctx, rock),
#  560|                                                 config);
#  561|       if (state->client == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def19]
sssd-2.12.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#   91|   
#   92|       json_array_foreach(jarray, i, jval) {
#   93|->         strval = json_string_value(jval);
#   94|           if (strval == NULL) {
#   95|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
sssd-2.12.0/src/krb5_plugin/common/utils.c: scope_hint: In function 'sss_json_array_to_strings'
sssd-2.12.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of 'array'
sssd-2.12.0/src/krb5_plugin/common/utils.c:26: included_from: Included from here.
#   91|   
#   92|       json_array_foreach(jarray, i, jval) {
#   93|->         strval = json_string_value(jval);
#   94|           if (strval == NULL) {
#   95|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def21]
sssd-2.12.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#   91|   
#   92|       json_array_foreach(jarray, i, jval) {
#   93|->         strval = json_string_value(jval);
#   94|           if (strval == NULL) {
#   95|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def22]
sssd-2.12.0/src/krb5_plugin/common/utils.c: scope_hint: In function ‘sss_json_array_to_strings’
sssd-2.12.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of ‘array’
sssd-2.12.0/src/krb5_plugin/common/utils.c:26: included_from: Included from here.
#   91|   
#   92|       json_array_foreach(jarray, i, jval) {
#   93|->         strval = json_string_value(jval);
#   94|           if (strval == NULL) {
#   95|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def23]
sssd-2.12.0/src/krb5_plugin/common/utils.c: scope_hint: In function 'sss_radius_encode_padata'
sssd-2.12.0/src/krb5_plugin/common/utils.c:199:11: warning[-Wanalyzer-malloc-leak]: leak of 'array'
#  197|       char *str;
#  198|   
#  199|->     str = fn(data);
#  200|       if (str == NULL) {
#  201|           return NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def24]
sssd-2.12.0/src/krb5_plugin/common/utils.c: scope_hint: In function ‘sss_radius_encode_padata’
sssd-2.12.0/src/krb5_plugin/common/utils.c:199:11: warning[-Wanalyzer-malloc-leak]: leak of ‘array’
#  197|       char *str;
#  198|   
#  199|->     str = fn(data);
#  200|       if (str == NULL) {
#  201|           return NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def25]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:32: included_from: Included from here.
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_from_json_object'
sssd-2.12.0/src/krb5_plugin/common/utils.h:27:46: warning[-Wanalyzer-malloc-leak]: leak of 'sss_passkey_challenge_init(jdata.domain,  credential_id_list,  jdata.user_verification,  jdata.cryptographic_challenge)'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro 'is_empty'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro 'is_empty'
#   25|   #include <krb5/preauth_plugin.h>
#   26|   
#   27|-> #define is_empty(var) ((var) == NULL || (var)[0] == '\0')
#   28|   
#   29|   void

Error: GCC_ANALYZER_WARNING (CWE-401): [#def26]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:32: included_from: Included from here.
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_from_json_object’
sssd-2.12.0/src/krb5_plugin/common/utils.h:27:46: warning[-Wanalyzer-malloc-leak]: leak of ‘sss_passkey_challenge_init(jdata.domain,  credential_id_list,  jdata.user_verification,  jdata.cryptographic_challenge)’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro ‘is_empty’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro ‘is_empty’
#   25|   #include <krb5/preauth_plugin.h>
#   26|   
#   27|-> #define is_empty(var) ((var) == NULL || (var)[0] == '\0')
#   28|   
#   29|   void

Error: GCC_ANALYZER_WARNING (CWE-401): [#def27]
sssd-2.12.0/src/krb5_plugin/idp/idp_clpreauth.c: scope_hint: In function 'sss_idpcl_process'
sssd-2.12.0/src/krb5_plugin/idp/idp_clpreauth.c:195:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  193|       }
#  194|   
#  195|->     cb->disable_fallback(context, rock);
#  196|       *_pa_data_out = padata;
#  197|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def28]
sssd-2.12.0/src/krb5_plugin/idp/idp_clpreauth.c:195:7: warning[-Wanalyzer-malloc-leak]: leak of 'sss_idpcl_encode_padata()'
#  193|       }
#  194|   
#  195|->     cb->disable_fallback(context, rock);
#  196|       *_pa_data_out = padata;
#  197|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def29]
sssd-2.12.0/src/krb5_plugin/idp/idp_kdcpreauth.c: scope_hint: In function 'sss_idpkdc_config_init'
sssd-2.12.0/src/krb5_plugin/idp/idp_kdcpreauth.c:75:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
#   73|       memset(config, 0, sizeof(struct sss_idpkdc_config));
#   74|   
#   75|->     ret = sss_radiuskdc_config_init(state, kctx, princ, configstr, &config->radius);
#   76|       if (ret != 0) {
#   77|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def30]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function 'sss_idp_config_free'
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:46:5: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
#   44|       }
#   45|   
#   46|->     sss_string_array_free(idpcfg->indicators);
#   47|       free(idpcfg);
#   48|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def31]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function ‘sss_idp_config_free’
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:46:5: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
#   44|       }
#   45|   
#   46|->     sss_string_array_free(idpcfg->indicators);
#   47|       free(idpcfg);
#   48|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def32]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function 'sss_idp_config_init'
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:74:13: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
#   72|       memset(idpcfg, 0, sizeof(struct sss_idp_config));
#   73|   
#   74|->     jroot = json_loads(config, 0, &jret);
#   75|       if (jroot == NULL) {
#   76|           ret = EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def33]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function ‘sss_idp_config_init’
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:74:13: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
#   72|       memset(idpcfg, 0, sizeof(struct sss_idp_config));
#   73|   
#   74|->     jroot = json_loads(config, 0, &jret);
#   75|       if (jroot == NULL) {
#   76|           ret = EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def34]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:81:11: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
#   79|   
#   80|       /* Only one item is supported at the moment. The rest is ignored. */
#   81|->     ret = json_unpack(jroot, "[{s:s, s?:o}]",
#   82|                         "type", &idpcfg->type,
#   83|                         "indicators", &jindicators);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def35]
sssd-2.12.0/src/krb5_plugin/idp/idp_utils.c:81:11: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
#   79|   
#   80|       /* Only one item is supported at the moment. The rest is ignored. */
#   81|->     ret = json_unpack(jroot, "[{s:s, s?:o}]",
#   82|                         "type", &idpcfg->type,
#   83|                         "indicators", &jindicators);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def36]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def37]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def38]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def39]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:176:11: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  174|       }
#  175|   
#  176|->     ret = sss_passkey_concat_credentials(data->credential_id_list,
#  177|                                            &result_creds);
#  178|       if (ret != 0) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def40]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
#  206|       /* Child */
#  207|       if (cpid == 0) {
#  208|->         close(pipe_to_child[1]);
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def41]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  206|       /* Child */
#  207|       if (cpid == 0) {
#  208|->         close(pipe_to_child[1]);
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def42]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  206|       /* Child */
#  207|       if (cpid == 0) {
#  208|->         close(pipe_to_child[1]);
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def43]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
#  206|       /* Child */
#  207|       if (cpid == 0) {
#  208|->         close(pipe_to_child[1]);
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def44]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  206|       /* Child */
#  207|       if (cpid == 0) {
#  208|->         close(pipe_to_child[1]);
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def45]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   
#  211|->         close(pipe_to_parent[0]);
#  212|           dup2(pipe_to_parent[1], STDOUT_FILENO);
#  213|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def46]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   
#  211|->         close(pipe_to_parent[0]);
#  212|           dup2(pipe_to_parent[1], STDOUT_FILENO);
#  213|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def47]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   
#  211|->         close(pipe_to_parent[0]);
#  212|           dup2(pipe_to_parent[1], STDOUT_FILENO);
#  213|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def48]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  209|           dup2(pipe_to_child[0], STDIN_FILENO);
#  210|   
#  211|->         close(pipe_to_parent[0]);
#  212|           dup2(pipe_to_parent[1], STDOUT_FILENO);
#  213|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def49]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
#  217|        * back from child */
#  218|       } else {
#  219|->         close(pipe_to_child[0]);
#  220|           close(pipe_to_parent[1]);
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def50]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  217|        * back from child */
#  218|       } else {
#  219|->         close(pipe_to_child[0]);
#  220|           close(pipe_to_parent[1]);
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def51]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  217|        * back from child */
#  218|       } else {
#  219|->         close(pipe_to_child[0]);
#  220|           close(pipe_to_parent[1]);
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def52]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
#  217|        * back from child */
#  218|       } else {
#  219|->         close(pipe_to_child[0]);
#  220|           close(pipe_to_parent[1]);
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def53]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  217|        * back from child */
#  218|       } else {
#  219|->         close(pipe_to_child[0]);
#  220|           close(pipe_to_parent[1]);
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def54]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  218|       } else {
#  219|           close(pipe_to_child[0]);
#  220|->         close(pipe_to_parent[1]);
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def55]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  218|       } else {
#  219|           close(pipe_to_child[0]);
#  220|->         close(pipe_to_parent[1]);
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def56]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
#  218|       } else {
#  219|           close(pipe_to_child[0]);
#  220|->         close(pipe_to_parent[1]);
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def57]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  218|       } else {
#  219|           close(pipe_to_child[0]);
#  220|->         close(pipe_to_parent[1]);
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def58]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  220|           close(pipe_to_parent[1]);
#  221|   
#  222|->         write(pipe_to_child[1], pin, strlen(pin));
#  223|           close(pipe_to_child[1]);
#  224|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def59]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  220|           close(pipe_to_parent[1]);
#  221|   
#  222|->         write(pipe_to_child[1], pin, strlen(pin));
#  223|           close(pipe_to_child[1]);
#  224|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def60]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  220|           close(pipe_to_parent[1]);
#  221|   
#  222|->         write(pipe_to_child[1], pin, strlen(pin));
#  223|           close(pipe_to_child[1]);
#  224|   

Error: COMPILER_WARNING (CWE-252): [#def61]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wunused-result]: ignoring return value of 'write' declared with attribute 'warn_unused_result'
#  222 |         write(pipe_to_child[1], pin, strlen(pin));
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  220|           close(pipe_to_parent[1]);
#  221|   
#  222|->         write(pipe_to_child[1], pin, strlen(pin));
#  223|           close(pipe_to_child[1]);
#  224|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def62]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));
#  223|->         close(pipe_to_child[1]);
#  224|   
#  225|           size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def63]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));
#  223|->         close(pipe_to_child[1]);
#  224|   
#  225|           size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def64]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  221|   
#  222|           write(pipe_to_child[1], pin, strlen(pin));
#  223|->         close(pipe_to_child[1]);
#  224|   
#  225|           size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def65]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:231:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  229|           }
#  230|   
#  231|->         close(pipe_to_parent[0]);
#  232|           wait(NULL);
#  233|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def66]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:231:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  229|           }
#  230|   
#  231|->         close(pipe_to_parent[0]);
#  232|           wait(NULL);
#  233|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def67]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_clpreauth.c:232:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
#  230|   
#  231|           close(pipe_to_parent[0]);
#  232|->         wait(NULL);
#  233|       }
#  234|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def68]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_kdcpreauth.c: scope_hint: In function 'sss_passkeykdc_config_init'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_kdcpreauth.c:75:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
#   73|       memset(config, 0, sizeof(struct sss_passkeykdc_config));
#   74|   
#   75|->     ret = sss_radiuskdc_config_init(state, kctx, princ, configstr, &config->radius);
#   76|       if (ret != 0) {
#   77|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def69]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:42:5: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_free.part.0’
#   40|       }
#   41|   
#   42|->     sss_string_array_free(passkey->indicators);
#   43|       free(passkey);
#   44|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def70]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_init’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:67:13: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
#   65|       memset(passkey, 0, sizeof(struct sss_passkey_config));
#   66|   
#   67|->     jroot = json_loads(config, 0, &jret);
#   68|       if (jroot == NULL) {
#   69|           ret = EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def71]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:73:11: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
#   71|       }
#   72|   
#   73|->     ret = json_unpack(jroot, "[{s?:o}]", "indicators", &jindicators);
#   74|       if (ret != 0) {
#   75|           ret = EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def72]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:81:31: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
#   79|       /* Are indicators set? */
#   80|       if (jindicators != NULL) {
#   81|->         passkey->indicators = sss_json_array_to_strings(jindicators);
#   82|           if (passkey->indicators == NULL) {
#   83|               ret = EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-416): [#def73]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_free.part.0'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
#  109|       }
#  110|   
#  111|->     free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|       sss_string_array_free(data->credential_id_list);

Error: GCC_ANALYZER_WARNING (CWE-416): [#def74]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  109|       }
#  110|   
#  111|->     free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|       sss_string_array_free(data->credential_id_list);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def75]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def76]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of 'data'
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def77]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of 'message'
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def78]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def79]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def80]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘message’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  111|       free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|->     sss_string_array_free(data->credential_id_list);
#  114|   
#  115|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def81]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  113|       sss_string_array_free(data->credential_id_list);
#  114|   
#  115|->     free(data);
#  116|   }
#  117|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def82]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  113|       sss_string_array_free(data->credential_id_list);
#  114|   
#  115|->     free(data);
#  116|   }
#  117|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def83]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_init'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  146|       }
#  147|   
#  148|->     data->credential_id_list = sss_string_array_copy(credential_id_list);
#  149|       if (data->credential_id_list == NULL) {
#  150|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def84]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of 'data'
#  146|       }
#  147|   
#  148|->     data->credential_id_list = sss_string_array_copy(credential_id_list);
#  149|       if (data->credential_id_list == NULL) {
#  150|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def85]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#  146|       }
#  147|   
#  148|->     data->credential_id_list = sss_string_array_copy(credential_id_list);
#  149|       if (data->credential_id_list == NULL) {
#  150|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def86]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_init’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
#  146|       }
#  147|   
#  148|->     data->credential_id_list = sss_string_array_copy(credential_id_list);
#  149|       if (data->credential_id_list == NULL) {
#  150|           ret = ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def87]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_from_json_object'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:198:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  196|                                         jdata.cryptographic_challenge);
#  197|   
#  198|->     sss_string_array_free(credential_id_list);
#  199|       return data;
#  200|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def88]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_from_json_object’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:198:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#  196|                                         jdata.cryptographic_challenge);
#  197|   
#  198|->     sss_string_array_free(credential_id_list);
#  199|       return data;
#  200|   }

Error: GCC_ANALYZER_WARNING (CWE-416): [#def89]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_reply_free.part.0'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
#  241|       }
#  242|   
#  243|->     free(data->credential_id);
#  244|       free(data->cryptographic_challenge);
#  245|       free(data->authenticator_data);

Error: GCC_ANALYZER_WARNING (CWE-416): [#def90]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
#  241|       }
#  242|   
#  243|->     free(data->credential_id);
#  244|       free(data->cryptographic_challenge);
#  245|       free(data->authenticator_data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def91]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_free.part.0'
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:320:12: warning[-Wanalyzer-malloc-leak]: leak of 'sss_passkey_reply_from_json_object(json_loads(json_str, 0, & jret))'
#  318|       }
#  319|   
#  320|->     return sss_passkey_reply_init(jdata.credential_id,
#  321|                                     jdata.cryptographic_challenge,
#  322|                                     jdata.authenticator_data,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def92]
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c:320:12: warning[-Wanalyzer-malloc-leak]: leak of ‘sss_passkey_reply_from_json_object(json_loads(json_str, 0, & jret))’
sssd-2.12.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  318|       }
#  319|   
#  320|->     return sss_passkey_reply_init(jdata.credential_id,
#  321|                                     jdata.cryptographic_challenge,
#  322|                                     jdata.authenticator_data,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def93]
sssd-2.12.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c: scope_hint: In function 'sss_userok'
sssd-2.12.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c:69:18: warning[-Wanalyzer-malloc-leak]: leak of 'buffer'
#   67|       }
#   68|   
#   69|->     nss_status = _nss_sss_getpwnam_r(princ_str, &pwd, buffer, buflen,
#   70|                                        &nss_errno);
#   71|       if (nss_status != NSS_STATUS_SUCCESS) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def94]
sssd-2.12.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c: scope_hint: In function 'sss_an2ln'
sssd-2.12.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c:137:18: warning[-Wanalyzer-malloc-leak]: leak of 'buffer'
#  135|       }
#  136|   
#  137|->     nss_status = _nss_sss_getpwnam_r(princ_str, &pwd, buffer, buflen,
#  138|                                        &nss_errno);
#  139|       if (nss_status != NSS_STATUS_SUCCESS) {

Error: COMPILER_WARNING (CWE-704): [#def95]
sssd-2.12.0/src/lib/certmap/sss_certmap.c: scope_hint: In function 'get_type_prefix'
sssd-2.12.0/src/lib/certmap/sss_certmap.c:106:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  104|       *rule_start = match_rule;
#  105|   
#  106|->     delim = strchr(match_rule, ':');
#  107|       if (delim == NULL) {
#  108|           /* no type prefix found */

Error: COMPILER_WARNING (CWE-704): [#def96]
sssd-2.12.0/src/lib/certmap/sss_certmap.c: scope_hint: In function 'expand_sid'
sssd-2.12.0/src/lib/certmap/sss_certmap.c:586:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  584|           exp = talloc_strdup(ctx, sid);
#  585|       } else if (strcasecmp(attr_name, "rid") == 0) {
#  586|->         sep = strrchr(sid, '-');
#  587|           if (sep == NULL || sep[1] == '\0') {
#  588|               CM_DEBUG(ctx, "Unsupported SID string [%s].", sid);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def97]
sssd-2.12.0/src/lib/cifs_idmap_sss/cifs_idmap_sss.c: scope_hint: In function 'cifs_idmap_init_plugin'
sssd-2.12.0/src/lib/cifs_idmap_sss/cifs_idmap_sss.c:74:11: warning[-Wanalyzer-malloc-leak]: leak of 'ctx'
#   72|       ctx_set_error(ctx, NULL);
#   73|   
#   74|->     err = sss_idmap_init(NULL, NULL, NULL, &ctx->idmap);
#   75|       if (err != IDMAP_SUCCESS) {
#   76|           ctx_set_error(ctx, idmap_error_string(err));

Error: GCC_ANALYZER_WARNING (CWE-465): [#def98]
sssd-2.12.0/src/lib/idmap/sss_idmap.c: scope_hint: In function 'sss_idmap_gen_to_unix'
sssd-2.12.0/src/lib/idmap/sss_idmap.c:1322:30: warning[-Wanalyzer-deref-before-check]: check of 'idmap_domain_info' for NULL after already dereferencing it
sssd-2.12.0/src/lib/idmap/sss_idmap.c:33: included_from: Included from here.
sssd-2.12.0/src/lib/idmap/sss_idmap.c:1310:5: note: in expansion of macro 'CHECK_IDMAP_CTX'
sssd-2.12.0/src/lib/idmap/sss_idmap.c:1310:5: note: in expansion of macro 'CHECK_IDMAP_CTX'
# 1320|   
# 1321|       /* Try primary slices */
# 1322|->     while (idmap_domain_info != NULL) {
# 1323|           if (is_from_dom(idmap_domain_info->sid, domain_id)) {
# 1324|               if (idmap_domain_info->external_mapping == true) {

Error: COMPILER_WARNING (CWE-457): [#def99]
sssd-2.12.0/src/p11_child/p11_child_openssl.c: scope_hint: In function ‘do_card’
sssd-2.12.0/src/p11_child/p11_child_openssl.c:2227:15: warning[-Wmaybe-uninitialized]: ‘module_id’ may be used uninitialized
# 2227 |         ret = do_slot(module, module_id, slot_id, &info, &token_info, &module_info,
#      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2228 |                       mem_ctx, p11_ctx, mode, pin, module_name_in, token_name_in,
#      |                       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2229 |                       key_id_in, label_in, uri_str, _multi);
#      |                       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
sssd-2.12.0/src/p11_child/p11_child_openssl.c:1995:12: note: ‘module_id’ was declared here
# 1995 |     size_t module_id;
#      |            ^~~~~~~~~
# 2225|           }
# 2226|   
# 2227|->         ret = do_slot(module, module_id, slot_id, &info, &token_info, &module_info,
# 2228|                         mem_ctx, p11_ctx, mode, pin, module_name_in, token_name_in,
# 2229|                         key_id_in, label_in, uri_str, _multi);

Error: COMPILER_WARNING (CWE-704): [#def100]
sssd-2.12.0/src/providers/ad/ad_access.c: scope_hint: In function 'parse_sub_filter'
sssd-2.12.0/src/providers/ad/ad_access.c:73:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#   71|       char *specdelim;
#   72|   
#   73|->     specdelim = strchr(full_filter, ':');
#   74|       if (specdelim == NULL) return EINVAL;
#   75|   

Error: COMPILER_WARNING (CWE-704): [#def101]
sssd-2.12.0/src/providers/ad/ad_access.c: scope_hint: In function 'parse_filter'
sssd-2.12.0/src/providers/ad/ad_access.c:112:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  110|       if (filter == NULL || spec == NULL || flags == NULL) return EINVAL;
#  111|   
#  112|->     kwdelim = strchr(full_filter, ':');
#  113|       if (kwdelim != NULL) {
#  114|           specdelim = strchr(kwdelim+1, ':');

Error: GCC_ANALYZER_WARNING (CWE-476): [#def102]
sssd-2.12.0/src/providers/ad/ad_subdomains.c: scope_hint: In function 'ad_get_slave_domain_send'
sssd-2.12.0/src/providers/ad/ad_subdomains.c:1135:30: warning[-Wanalyzer-null-dereference]: dereference of NULL 'root_id_ctx'
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/providers/data_provider.h:40: included_from: Included from here.
sssd-2.12.0/src/providers/backend.h:25: included_from: Included from here.
sssd-2.12.0/src/providers/ldap/sdap_async.h:29: included_from: Included from here.
sssd-2.12.0/src/providers/ad/ad_subdomains.c:25: included_from: Included from here.
sssd-2.12.0/src/providers/ad/ad_subdomains.c:2277:9: note: in expansion of macro 'DEBUG'
# 1133|       state->sd_ctx = sd_ctx;
# 1134|       state->be_ctx = sd_ctx->be_ctx;
# 1135|->     state->opts = root_id_ctx->sdap_id_ctx->opts;
# 1136|       state->idmap_ctx = root_id_ctx->sdap_id_ctx->opts->idmap_ctx;
# 1137|       state->root_attrs = root_attrs;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def103]
sssd-2.12.0/src/providers/ipa/ipa_access.c: scope_hint: In function 'hbac_debug_messages'
sssd-2.12.0/src/providers/ipa/ipa_access.c:68:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   66|   
#   67|       va_start(ap, fmt);
#   68|->     sss_vdebug_fn(file, line, function, loglevel, 0, fmt, ap);
#   69|       va_end(ap);
#   70|   }

Error: GCC_ANALYZER_WARNING (CWE-404): [#def104]
sssd-2.12.0/src/providers/ipa/ipa_dn.c: scope_hint: In function 'check_dn'
sssd-2.12.0/src/providers/ipa/ipa_dn.c:40:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   38|   
#   39|       /* check RDN attribute */
#   40|->     ldbattr = ldb_dn_get_rdn_name(dn);
#   41|       if (ldbattr == NULL || strcasecmp(ldbattr, rdn_attr) != 0) {
#   42|           return false;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def105]
sssd-2.12.0/src/providers/ipa/ipa_dn.c:50:16: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   48|   
#   49|       comp = 1;
#   50|->     num_comp = ldb_dn_get_comp_num(dn);
#   51|   
#   52|       va_copy(ap, in_ap);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def106]
sssd-2.12.0/src/providers/ipa/ipa_dn.c:63:19: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   61|           }
#   62|   
#   63|->         ldbattr = ldb_dn_get_component_name(dn, comp);
#   64|           if (ldbattr == NULL || strcasecmp(ldbattr, attr) != 0) {
#   65|               goto vafail;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def107]
sssd-2.12.0/src/providers/ipa/ipa_dn.c:68:18: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   66|           }
#   67|   
#   68|->         ldbval = ldb_dn_get_component_val(dn, comp);
#   69|           if (ldbval == NULL) {
#   70|               goto vafail;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def108]
sssd-2.12.0/src/providers/ipa/ipa_dn.c:82:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   80|       va_end(ap);
#   81|   
#   82|->     ldbattr = ldb_dn_get_component_name(dn, comp);
#   83|       if (ldbattr == NULL || strcmp(ldbattr, "dc") != 0) {
#   84|           return false;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def109]
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c: scope_hint: In function 'ipa_getkeytab_exec'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:854:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
#  852|       }
#  853|   
#  854|->     gkt_env[0] = talloc_asprintf(NULL, "KRB5CCNAME=%s", ccache);
#  855|       if (gkt_env[0] == NULL) {
#  856|           DEBUG(SSSDBG_FATAL_FAILURE, "Failed to format KRB5CCNAME\n");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def110]
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:864:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.12.0/src/util/child_common.h:28: included_from: Included from here.
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:865:9: note: in expansion of macro 'DEBUG'
#  862|       ret = unlink(keytab_path);
#  863|       if (ret == -1) {
#  864|->         ret = errno;
#  865|           DEBUG(SSSDBG_FATAL_FAILURE,
#  866|                 "Failed to unlink the temporary ccname [%d][%s]\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def111]
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:880:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:881:5: note: in expansion of macro 'DEBUG'
#  878|   
#  879|       /* The child should never end up here */
#  880|->     ret = errno;
#  881|       DEBUG(SSSDBG_FATAL_FAILURE,
#  882|             "execle failed [%d][%s].\n", ret, sss_strerror(ret));

Error: COMPILER_WARNING (CWE-252): [#def112]
sssd-2.12.0/src/providers/ipa/selinux_child.c: scope_hint: In function ‘main’
sssd-2.12.0/src/providers/ipa/selinux_child.c:330:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
#  330 |         setresuid(suid, suid, suid);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~
#  328|   
#  329|       if (getresuid(&ruid, &euid, &suid) == 0) {
#  330|->         setresuid(suid, suid, suid);
#  331|       }
#  332|       if (getresgid(&rgid, &egid, &sgid) == 0) {

Error: COMPILER_WARNING (CWE-252): [#def113]
sssd-2.12.0/src/providers/ipa/selinux_child.c:333:9: warning[-Wunused-result]: ignoring return value of ‘setresgid’ declared with attribute ‘warn_unused_result’
#  333 |         setresgid(sgid, sgid, sgid);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~
#  331|       }
#  332|       if (getresgid(&rgid, &egid, &sgid) == 0) {
#  333|->         setresgid(sgid, sgid, sgid);
#  334|       }
#  335|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def114]
sssd-2.12.0/src/providers/ipa/selinux_child_semanage.c: scope_hint: In function ‘sss_semanage_error_callback’
sssd-2.12.0/src/providers/ipa/selinux_child_semanage.c:54:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
#   52|   
#   53|       va_start(ap, fmt);
#   54|->     sss_vdebug_fn(__FILE__, __LINE__, "libsemanage", level,
#   55|                     APPEND_LINE_FEED, fmt, ap);
#   56|       va_end(ap);

Error: COMPILER_WARNING (CWE-252): [#def115]
sssd-2.12.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function 'switch_to_user'
sssd-2.12.0/src/providers/krb5/krb5_ccache.c:68:9: warning[-Wunused-result]: ignoring return value of 'setresuid' declared with attribute 'warn_unused_result'
#   68 |         setresuid(-1, suid, -1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
#   66|       ret = setresgid(-1, rgid, -1);
#   67|       if (ret != 0) {
#   68|->         setresuid(-1, suid, -1);
#   69|           return errno;
#   70|       }

Error: COMPILER_WARNING (CWE-252): [#def116]
sssd-2.12.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function ‘switch_to_user’
sssd-2.12.0/src/providers/krb5/krb5_ccache.c:68:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
#   68 |         setresuid(-1, suid, -1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
#   66|       ret = setresgid(-1, rgid, -1);
#   67|       if (ret != 0) {
#   68|->         setresuid(-1, suid, -1);
#   69|           return errno;
#   70|       }

Error: COMPILER_WARNING (CWE-252): [#def117]
sssd-2.12.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function 'switch_to_service'
sssd-2.12.0/src/providers/krb5/krb5_ccache.c:98:9: warning[-Wunused-result]: ignoring return value of 'setresuid' declared with attribute 'warn_unused_result'
#   98 |         setresuid(-1, ruid, -1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
#   96|       ret = setresgid(-1, sgid, -1);
#   97|       if (ret != 0) {
#   98|->         setresuid(-1, ruid, -1);
#   99|           return errno;
#  100|       }

Error: COMPILER_WARNING (CWE-252): [#def118]
sssd-2.12.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function ‘switch_to_service’
sssd-2.12.0/src/providers/krb5/krb5_ccache.c:98:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
#   98 |         setresuid(-1, ruid, -1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
#   96|       ret = setresgid(-1, sgid, -1);
#   97|       if (ret != 0) {
#   98|->         setresuid(-1, ruid, -1);
#   99|           return errno;
#  100|       }

Error: GCC_ANALYZER_WARNING (CWE-465): [#def119]
sssd-2.12.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘answer_otp’
sssd-2.12.0/src/providers/krb5/krb5_child.c:673:35: warning[-Wanalyzer-deref-before-check]: check of ‘**chl.tokeninfo’ for NULL after already dereferencing it
sssd-2.12.0/src/util/child_bootstrap.h:27: included_from: Included from here.
sssd-2.12.0/src/providers/krb5/krb5_child.c:36: included_from: Included from here.
sssd-2.12.0/src/providers/krb5/krb5_child.c:651:9: note: in expansion of macro ‘DEBUG’
#  671|   
#  672|       /* Find the first supported tokeninfo which matches our authtoken. */
#  673|->     for (i = 0; chl->tokeninfo[i] != NULL; i++) {
#  674|           ret = tokeninfo_matches(kr, chl->tokeninfo[i], kr->pd->authtok,
#  675|                                   &token, &pin);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def120]
sssd-2.12.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘create_empty_cred’
sssd-2.12.0/src/providers/krb5/krb5_child.c:1543:12: warning[-Wanalyzer-malloc-leak]: leak of ‘cred’
# 1541|       }
# 1542|   
# 1543|->     kerr = krb5_copy_principal(ctx, princ, &cred->client);
# 1544|       if (kerr != 0) {
# 1545|           DEBUG(SSSDBG_CRIT_FAILURE, "krb5_copy_principal failed.\n");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def121]
sssd-2.12.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘try_open_krb5_conf’
sssd-2.12.0/src/providers/krb5/krb5_child.c:4221:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/etc/krb5.conf", 0)’
# 4219|       fd = open("/etc/krb5.conf", O_RDONLY);
# 4220|       if (fd != -1) {
# 4221|->         close(fd);
# 4222|       } else {
# 4223|           ret = errno;

Error: COMPILER_WARNING (CWE-704): [#def122]
sssd-2.12.0/src/providers/ldap/sdap.c: scope_hint: In function 'split_extra_attr'
sssd-2.12.0/src/providers/ldap/sdap.c:101:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#   99|       char *sep;
#  100|   
#  101|->     sep = strchr(conf_attr, ':');
#  102|       if (sep == NULL) {
#  103|           sysdb_attr = talloc_strdup(mem_ctx, conf_attr);

Error: COMPILER_WARNING (CWE-704): [#def123]
sssd-2.12.0/src/providers/ldap/sdap_async_groups.c: scope_hint: In function 'are_sids_from_same_dom'
sssd-2.12.0/src/providers/ldap/sdap_async_groups.c:746:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  746 |     rid1 = strrchr(sid1, '-');
#      |          ^
#  744|       bool result;
#  745|   
#  746|->     rid1 = strrchr(sid1, '-');
#  747|       if (rid1 == NULL) {
#  748|           return EINVAL;

Error: COMPILER_WARNING (CWE-704): [#def124]
sssd-2.12.0/src/providers/ldap/sdap_async_groups.c:751:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  751 |     rid2 = strrchr(sid2, '-');
#      |          ^
#  749|       }
#  750|   
#  751|->     rid2 = strrchr(sid2, '-');
#  752|       if (rid2 == NULL) {
#  753|           return EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def125]
sssd-2.12.0/src/providers/ldap/sdap_async_initgroups.c: scope_hint: In function 'sdap_add_incomplete_groups'
sssd-2.12.0/src/providers/ldap/sdap_async_initgroups.c:71:31: warning[-Wanalyzer-null-dereference]: dereference of NULL 'sysdb_groupnames'
sssd-2.12.0/src/util/util.h:45: included_from: Included from here.
sssd-2.12.0/src/providers/ldap/sdap_async_initgroups.c:24: included_from: Included from here.
#   69|       mi = 0;
#   70|   
#   71|->     for (i=0; sysdb_groupnames[i]; i++) {
#   72|           subdomain = find_domain_by_object_name(domain, sysdb_groupnames[i]);
#   73|           if (subdomain == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def126]
sssd-2.12.0/src/providers/ldap/sdap_certmap.c: scope_hint: In function 'ext_debug'
sssd-2.12.0/src/providers/ldap/sdap_certmap.c:48:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   46|   
#   47|       va_start(ap, format);
#   48|->     sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
#   49|                     format, ap);
#   50|       va_end(ap);

Error: COMPILER_WARNING (CWE-704): [#def127]
sssd-2.12.0/src/providers/ldap/sdap_range.c: scope_hint: In function 'sdap_parse_range'
sssd-2.12.0/src/providers/ldap/sdap_range.c:48:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#   48 |     endptr = strchr(attr_desc, ';');
#      |            ^
#   46|   
#   47|       /* The base_attr is the portion before the semicolon (if it exists) */
#   48|->     endptr = strchr(attr_desc, ';');
#   49|       if (endptr == NULL) {
#   50|           /* Not a ranged attribute. Just copy the attribute desc */

Error: GCC_ANALYZER_WARNING (CWE-404): [#def128]
sssd-2.12.0/src/providers/proxy/proxy_certmap.c: scope_hint: In function 'ext_debug'
sssd-2.12.0/src/providers/proxy/proxy_certmap.c:43:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#   41|   
#   42|       va_start(ap, format);
#   43|->     sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED, format, ap);
#   44|       va_end(ap);
#   45|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def129]
sssd-2.12.0/src/providers/proxy/proxy_child.c:87:23: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#   85|                   reply[i].resp_retcode = 0;
#   86|   
#   87|->                 ret = sss_authtok_get_password(auth_data->authtok,
#   88|                                                  &password, &pwlen);
#   89|                   if (ret) goto failed;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def130]
sssd-2.12.0/src/providers/proxy/proxy_child.c:87:23: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
#   85|                   reply[i].resp_retcode = 0;
#   86|   
#   87|->                 ret = sss_authtok_get_password(auth_data->authtok,
#   88|                                                  &password, &pwlen);
#   89|                   if (ret) goto failed;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def131]
sssd-2.12.0/src/providers/proxy/proxy_child.c:109:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#  107|   
#  108|   failed:
#  109|->     free(reply);
#  110|       return PAM_CONV_ERR;
#  111|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def132]
sssd-2.12.0/src/providers/proxy/proxy_child.c:140:27: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
#  138|                   if (!auth_data->sent_old) {
#  139|                       /* The first prompt will be asking for the old authtok */
#  140|->                     ret = sss_authtok_get_password(auth_data->authtok,
#  141|                                                     &password, &pwlen);
#  142|                       if (ret) goto failed;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def133]
sssd-2.12.0/src/providers/proxy/proxy_child.c:150:27: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
#  148|                   else {
#  149|                       /* Subsequent prompts are looking for the new authtok */
#  150|->                     ret = sss_authtok_get_password(auth_data->newauthtok,
#  151|                                                     &password, &pwlen);
#  152|                       if (ret) goto failed;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def134]
sssd-2.12.0/src/python/pysss.c: scope_hint: In function 'py_sss_getgrouplist'
sssd-2.12.0/src/python/pysss.c:252:15: warning[-Wanalyzer-malloc-leak]: leak of 'groups'
#  250|   
#  251|       do {
#  252|->         ret = getgrouplist(username, pw->pw_gid, groups, &ngroups);
#  253|           if (ret < ngroups) {
#  254|               gid_t *tmp_groups = realloc(groups, ngroups * sizeof(gid_t));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def135]
sssd-2.12.0/src/responder/common/responder_common.c: scope_hint: In function ‘get_client_cred’
sssd-2.12.0/src/responder/common/responder_common.c:132:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&proc_path, 0)’
sssd-2.12.0/src/util/util_creds.h:24: included_from: Included from here.
sssd-2.12.0/src/responder/common/responder_common.c:43: included_from: Included from here.
sssd-2.12.0/src/shared/cred.h:35:23: note: in definition of macro ‘CRED_PID’
sssd-2.12.0/src/responder/common/responder_common.c:126:9: note: in expansion of macro ‘cli_creds_get_pid’
#  130|               proc_fd = open(proc_path, O_RDONLY);
#  131|               if (proc_fd != -1) {
#  132|->                 if (sss_fd_nonblocking(proc_fd) == EOK) {
#  133|                       ret = read(proc_fd, cmd_line, sizeof(cmd_line)-1);
#  134|                       if (ret > 0) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def136]
sssd-2.12.0/src/responder/common/responder_common.c: scope_hint: In function ‘create_pipe_fd’
sssd-2.12.0/src/responder/common/responder_common.c:708:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
#  706|       orig_umaskval = umask(umaskval);
#  707|   
#  708|->     ret = sss_fd_nonblocking(fd);
#  709|       if (ret != EOK) {
#  710|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def137]
sssd-2.12.0/src/responder/common/responder_common.c:756:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
#  754|           *_fd = fd;
#  755|       } else {
#  756|->         close(fd);
#  757|       }
#  758|       return ret;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def138]
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c: scope_hint: In function ‘sss_mc_destroy_file’
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:1242:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(filename, 2)’
# 1240|       ofd = open(filename, O_RDWR);
# 1241|       if (ofd != -1) {
# 1242|->         ret = sss_br_lock_file(ofd, 0, 1, retries, t);
# 1243|           if (ret != EOK) {
# 1244|               DEBUG(SSSDBG_FATAL_FAILURE, "Failed to lock file %s.\n", filename);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def139]
sssd-2.12.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘ext_debug’
sssd-2.12.0/src/responder/pam/pamsrv_p11.c:137:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
#  135|   
#  136|       va_start(ap, format);
#  137|->     sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
#  138|                     format, ap);
#  139|       va_end(ap);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def140]
sssd-2.12.0/src/responder/ssh/ssh_cmd.c: scope_hint: In function ‘ssh_ext_debug’
sssd-2.12.0/src/responder/ssh/ssh_cmd.c:131:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
#  129|   
#  130|       va_start(ap, format);
#  131|->     sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
#  132|                     format, ap);
#  133|       va_end(ap);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def141]
sssd-2.12.0/src/sbus/interface/sbus_introspection.c: scope_hint: In function 'sbus_introspect'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:395:5: warning[-Wanalyzer-malloc-leak]: leak of 'memstream'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:378:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:378:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:393:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.12.0/src/sbus/interface/sbus_introspection.c:393:5: note: in expansion of macro 'WRITE_OR_FAIL'
#  393|       WRITE_OR_FAIL(memstream, ret, done, FMT_NODE_CLOSE);
#  394|   
#  395|->     fflush(memstream);
#  396|       introspection = talloc_memdup(mem_ctx, buffer, size + 1);
#  397|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def142]
sssd-2.12.0/src/sbus/request/sbus_message.c:105:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  103|        * freed through dbus api. */
#  104|   
#  105|->     bret = dbus_message_allocate_data_slot(&global_data_slot);
#  106|       if (!bret) {
#  107|           DEBUG(SSSDBG_CRIT_FAILURE, "Unable to allocate data slot!\n");

Error: GCC_ANALYZER_WARNING (CWE-404): [#def143]
sssd-2.12.0/src/sbus/request/sbus_message.c:113:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  111|   
#  112|       free_fn = sbus_msg_data_destructor;
#  113|->     bret = dbus_message_set_data(msg, global_data_slot, talloc_msg, free_fn);
#  114|       if (!bret) {
#  115|           DEBUG(SSSDBG_CRIT_FAILURE, "Unable to set message data!\n");

Error: GCC_ANALYZER_WARNING (CWE-404): [#def144]
sssd-2.12.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_method_create_empty'
sssd-2.12.0/src/sbus/request/sbus_message.c:180:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  178|       errno_t ret;
#  179|   
#  180|->     msg = dbus_message_new_method_call(bus, path, iface, method);
#  181|       if (msg == NULL) {
#  182|           DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create message\n");

Error: GCC_ANALYZER_WARNING (CWE-404): [#def145]
sssd-2.12.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_signal_create_empty'
sssd-2.12.0/src/sbus/request/sbus_message.c:255:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  253|       errno_t ret;
#  254|   
#  255|->     msg = dbus_message_new_signal(path, iface, signame);
#  256|       if (msg == NULL) {
#  257|           DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create message\n");

Error: GCC_ANALYZER_WARNING (CWE-404): [#def146]
sssd-2.12.0/src/sbus/sbus_opath.c: scope_hint: In function 'sbus_opath_escape'
sssd-2.12.0/src/sbus/sbus_opath.c:213:17: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/sbus/sbus_opath.c:21: included_from: Included from here.
#  211|       }
#  212|   
#  213|->     safe_path = talloc_strdup(tmp_ctx, "");
#  214|       if (safe_path == NULL) {
#  215|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def147]
sssd-2.12.0/src/sbus/sbus_opath.c:221:21: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  219|       if (strcmp(component, "") == 0) {
#  220|           /* the for loop would just fall through */
#  221|->         safe_path = talloc_asprintf_append_buffer(safe_path, "_");
#  222|           if (safe_path == NULL) {
#  223|               goto done;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def148]
sssd-2.12.0/src/sbus/sbus_opath.c:237:25: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  235|                   || (c >= 'a' && c <= 'z')
#  236|                   || (c >= '0' && c <= '9')) {
#  237|->             safe_path = talloc_asprintf_append_buffer(safe_path, "%c", c);
#  238|               if (safe_path == NULL) {
#  239|                   goto done;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def149]
sssd-2.12.0/src/sbus/sbus_opath.c:242:25: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  240|               }
#  241|           } else {
#  242|->             safe_path = talloc_asprintf_append_buffer(safe_path, "_%02x", c);
#  243|               if (safe_path == NULL) {
#  244|                   goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def150]
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.12.0/src/util/util.h:53: included_from: Included from here.
sssd-2.12.0/src/sss_client/autofs/sss_autofs_private.h:22: included_from: Included from here.
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:25: included_from: Included from here.
sssd-2.12.0/src/shared/safealign.h:82:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/shared/safealign.h:145:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT32'
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:445:5: note: in expansion of macro 'SAFEALIGN_SET_UINT32'
#   92|       enum sss_status status;
#   93|   
#   94|->     status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
#   95|                                                 repbuf, replen, errnop,
#   96|                                                 SSS_AUTOFS_SOCKET_NAME, false, false);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def151]
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c: scope_hint: In function 'sss_autofs_make_request'
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of 'name'
#   92|       enum sss_status status;
#   93|   
#   94|->     status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
#   95|                                                 repbuf, replen, errnop,
#   96|                                                 SSS_AUTOFS_SOCKET_NAME, false, false);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def152]
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
sssd-2.12.0/src/util/util.h:53: included_from: Included from here.
sssd-2.12.0/src/sss_client/autofs/sss_autofs_private.h:22: included_from: Included from here.
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:25: included_from: Included from here.
sssd-2.12.0/src/shared/safealign.h:82:5: note: in expansion of macro ‘SAFEALIGN_SETMEM_VALUE’
sssd-2.12.0/src/shared/safealign.h:145:30: note: in expansion of macro ‘SAFEALIGN_SETMEM_UINT32’
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:445:5: note: in expansion of macro ‘SAFEALIGN_SET_UINT32’
#   92|       enum sss_status status;
#   93|   
#   94|->     status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
#   95|                                                 repbuf, replen, errnop,
#   96|                                                 SSS_AUTOFS_SOCKET_NAME, false, false);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def153]
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c: scope_hint: In function ‘sss_autofs_make_request’
sssd-2.12.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of ‘name’
#   92|       enum sss_status status;
#   93|   
#   94|->     status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
#   95|                                                 repbuf, replen, errnop,
#   96|                                                 SSS_AUTOFS_SOCKET_NAME, false, false);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def154]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function 'sss_cli_close_socket'
sssd-2.12.0/src/sss_client/common.c:89:9: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
sssd-2.12.0/src/sss_client/common.c:34: included_from: Included from here.
#   87|   
#   88|       if (sd != -1) {
#   89|->         close(sd);
#   90|           sss_cli_sd_set(-1);
#   91|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def155]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function ‘sss_cli_close_socket’
sssd-2.12.0/src/sss_client/common.c:89:9: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
sssd-2.12.0/src/sss_client/common.c:34: included_from: Included from here.
#   87|   
#   88|       if (sd != -1) {
#   89|->         close(sd);
#   90|           sss_cli_sd_set(-1);
#   91|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def156]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function 'make_nonstd_fd_internals'
sssd-2.12.0/src/sss_client/common.c:535:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sd'
#  533|       if (fd >= 0 && fd <= 2) {
#  534|   #ifdef F_DUPFD
#  535|->         if ((new_fd = fcntl(fd, F_DUPFD, 3)) == -1) {
#  536|               return -1;
#  537|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def157]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function ‘make_nonstd_fd_internals’
sssd-2.12.0/src/sss_client/common.c:535:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sd’
#  533|       if (fd >= 0 && fd <= 2) {
#  534|   #ifdef F_DUPFD
#  535|->         if ((new_fd = fcntl(fd, F_DUPFD, 3)) == -1) {
#  536|               return -1;
#  537|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def158]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function 'make_safe_fd'
sssd-2.12.0/src/sss_client/common.c:591:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sd'
#  589|   #endif
#  590|   
#  591|->     if ((flags = fcntl(new_fd, F_GETFL)) == -1) {
#  592|           close(new_fd);
#  593|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def159]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function ‘make_safe_fd’
sssd-2.12.0/src/sss_client/common.c:591:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sd’
#  589|   #endif
#  590|   
#  591|->     if ((flags = fcntl(new_fd, F_GETFL)) == -1) {
#  592|           close(new_fd);
#  593|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def160]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function 'sss_cli_check_socket.part.0'
sssd-2.12.0/src/sss_client/common.c:767:16: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
#  765|       if (sss_cli_sb == NULL) {
#  766|           *errnop = EFAULT;
#  767|->         return SSS_STATUS_UNAVAIL;
#  768|       }
#  769|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def161]
sssd-2.12.0/src/sss_client/common.c: scope_hint: In function ‘sss_cli_check_socket.part.0’
sssd-2.12.0/src/sss_client/common.c:767:16: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
#  765|       if (sss_cli_sb == NULL) {
#  766|           *errnop = EFAULT;
#  767|->         return SSS_STATUS_UNAVAIL;
#  768|       }
#  769|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def162]
sssd-2.12.0/src/sss_client/common.c:807:19: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
#  805|           do {
#  806|               errno = 0;
#  807|->             res = poll(&pfd, 1, timeout);
#  808|               error = errno;
#  809|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def163]
sssd-2.12.0/src/sss_client/common.c:807:19: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
#  805|           do {
#  806|               errno = 0;
#  807|->             res = poll(&pfd, 1, timeout);
#  808|               error = errno;
#  809|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def164]
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  403|   
#  404|   done:
#  405|->     sss_nss_unlock();
#  406|       free(repbuf);
#  407|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def165]
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.d.names'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
#  403|   
#  404|   done:
#  405|->     sss_nss_unlock();
#  406|       free(repbuf);
#  407|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def166]
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.d.str'
sssd-2.12.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:29: included_from: Included from here.
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
#  403|   
#  404|   done:
#  405|->     sss_nss_unlock();
#  406|       free(repbuf);
#  407|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def167]
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.types'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
#  403|   
#  404|   done:
#  405|->     sss_nss_unlock();
#  406|       free(repbuf);
#  407|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def168]
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_uid_from_mc'
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c:98:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
#   96|           }
#   97|           buf = p;
#   98|->         rc = sss_nss_mc_getpwnam(name, len, &pwd, buf, buflen);
#   99|       } while (rc == ERANGE);
#  100|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def169]
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_gid_from_mc'
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c:139:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
#  137|           }
#  138|           buf = p;
#  139|->         rc = sss_nss_mc_getgrnam(name, len, &grp, buf, buflen);
#  140|       } while (rc == ERANGE);
#  141|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def170]
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_user_from_mc'
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c:174:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
#  172|           }
#  173|           buf = p;
#  174|->         rc = sss_nss_mc_getpwuid(uid, &pwd, buf, buflen);
#  175|       } while (rc == ERANGE);
#  176|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def171]
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_group_from_mc'
sssd-2.12.0/src/sss_client/nfs/sss_nfs_client.c:215:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
#  213|           }
#  214|           buf = p;
#  215|->         rc = sss_nss_mc_getgrgid(gid, &grp, buf, buflen);
#  216|       } while (rc == ERANGE);
#  217|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def172]
sssd-2.12.0/src/sss_client/nss_ipnetworks.c: scope_hint: In function '_nss_sss_getnetbyaddr_r'
sssd-2.12.0/src/sss_client/nss_ipnetworks.c:349:5: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.12.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.12.0/src/sss_client/nss_ipnetworks.c:36: included_from: Included from here.
sssd-2.12.0/src/sss_client/nss_ipnetworks.c:338:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/sss_client/nss_ipnetworks.c: scope_hint: In function '_nss_sss_getnetbyaddr_r'
#  347|       rd.len = data_len;
#  348|   
#  349|->     sss_nss_lock();
#  350|   
#  351|       nret = sss_nss_make_request(SSS_NSS_GETNETBYADDR, &rd,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def173]
sssd-2.12.0/src/sss_client/nss_ipnetworks.c:351:12: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.12.0/src/sss_client/nss_ipnetworks.c:338:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/sss_client/nss_ipnetworks.c: scope_hint: In function '_nss_sss_getnetbyaddr_r'
#  349|       sss_nss_lock();
#  350|   
#  351|->     nret = sss_nss_make_request(SSS_NSS_GETNETBYADDR, &rd,
#  352|                                   &repbuf, &replen, errnop);
#  353|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def174]
sssd-2.12.0/src/sss_client/nss_mc_common.c: scope_hint: In function 'sss_nss_mc_get_record'
sssd-2.12.0/src/sss_client/nss_mc_common.c:50:9: warning[-Wanalyzer-null-argument]: use of NULL 'copy_rec' where non-null expected
sssd-2.12.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.12.0/src/sss_client/nss_mc.h:35: included_from: Included from here.
sssd-2.12.0/src/sss_client/nss_mc_common.c:33: included_from: Included from here.
sssd-2.12.0/src/util/mmap_cache.h:65:43: note: in definition of macro 'MC_SLOT_TO_PTR'
sssd-2.12.0/src/sss_client/nss_mc_common.c:328:14: note: in expansion of macro 'MC_CHECK_RECORD_LENGTH'
sssd-2.12.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.12.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.12.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.12.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.12.0/src/sss_client/nss_mc_common.c:31: included_from: Included from here.
/usr/include/string.h:47:14: note: argument 1 of 'memcpy' must be non-null
#   48|       if (MC_VALID_BARRIER(_b1)) { \
#   49|           __sync_synchronize(); \
#   50|->         memcpy(dest, src, len); \
#   51|           __sync_synchronize(); \
#   52|           if ((src)->b2 == _b1) { \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def175]
sssd-2.12.0/src/sss_client/nss_netgroup.c: scope_hint: In function '_nss_sss_setnetgrent'
sssd-2.12.0/src/sss_client/nss_netgroup.c:194:12: warning[-Wanalyzer-malloc-leak]: leak of 'name'
#  192|       rd.len = name_len + 1;
#  193|   
#  194|->     nret = sss_nss_make_request(SSS_NSS_SETNETGRENT, &rd,
#  195|                                   &repbuf, &replen, &errnop);
#  196|       free(name);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def176]
sssd-2.12.0/src/sss_client/nss_services.c: scope_hint: In function '_nss_sss_getservbyport_r'
sssd-2.12.0/src/sss_client/nss_services.c:334:5: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.12.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.12.0/src/sss_client/nss_services.c:34: included_from: Included from here.
sssd-2.12.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.12.0/src/sss_client/nss_services.c:320:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
#  332|       rd.data = data;
#  333|   
#  334|->     sss_nss_lock();
#  335|   
#  336|       nret = sss_nss_make_request(SSS_NSS_GETSERVBYPORT, &rd,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def177]
sssd-2.12.0/src/sss_client/nss_services.c:336:12: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.12.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.12.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.12.0/src/sss_client/nss_services.c:320:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
#  334|       sss_nss_lock();
#  335|   
#  336|->     nret = sss_nss_make_request(SSS_NSS_GETSERVBYPORT, &rd,
#  337|                                   &repbuf, &replen, errnop);
#  338|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def178]
sssd-2.12.0/src/sss_client/pam_sss.c:108:5: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  106|   #endif
#  107|   
#  108|->     pam_vsyslog(pamh, LOG_AUTHPRIV|level, fmt, ap);
#  109|   
#  110|       va_end(ap);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def179]
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'logger'
sssd-2.12.0/src/sss_client/pam_sss.c:108:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/sss_client/pam_sss.c:30: included_from: Included from here.
#  106|   #endif
#  107|   
#  108|->     pam_vsyslog(pamh, LOG_AUTHPRIV|level, fmt, ap);
#  109|   
#  110|       va_end(ap);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def180]
sssd-2.12.0/src/sss_client/pam_sss.c:293:13: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  291|           mesg[0] = (const struct pam_message *) pam_msg;
#  292|   
#  293|->         ret=conv->conv(1, mesg, &resp,
#  294|                          conv->appdata_ptr);
#  295|           free(pam_msg);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def181]
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'do_pam_conversation'
sssd-2.12.0/src/sss_client/pam_sss.c:293:13: warning[-Wanalyzer-malloc-leak]: leak of 'pam_msg'
#  291|           mesg[0] = (const struct pam_message *) pam_msg;
#  292|   
#  293|->         ret=conv->conv(1, mesg, &resp,
#  294|                          conv->appdata_ptr);
#  295|           free(pam_msg);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def182]
sssd-2.12.0/src/sss_client/pam_sss.c:312:21: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  310|                   if (null_strcmp(answer, resp[0].resp) != 0) {
#  311|                       logger(pamh, LOG_NOTICE, "Passwords do not match.");
#  312|->                     sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
#  313|                       free(resp[0].resp);
#  314|                       if (answer != NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def183]
sssd-2.12.0/src/sss_client/pam_sss.c:315:25: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  313|                       free(resp[0].resp);
#  314|                       if (answer != NULL) {
#  315|->                         sss_erase_mem_securely((void *) answer, strlen(answer));
#  316|                           free(answer);
#  317|                           answer = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def184]
sssd-2.12.0/src/sss_client/pam_sss.c:330:17: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  328|                       goto failed;
#  329|                   }
#  330|->                 sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
#  331|                   free(resp[0].resp);
#  332|               } else {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def185]
sssd-2.12.0/src/sss_client/pam_sss.c:338:21: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
#  336|                   } else {
#  337|                       answer = strndup(resp[0].resp, MAX_AUTHTOK_SIZE);
#  338|->                     sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
#  339|                       free(resp[0].resp);
#  340|                       if(answer == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def186]
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'prompt_password'
sssd-2.12.0/src/sss_client/pam_sss.c:1667:9: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
sssd-2.12.0/src/sss_client/pam_sss.c:58: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss.c:2874:45: note: in expansion of macro '_'
# 1665|       } else {
# 1666|           pi->pam_authtok = strdup(answer);
# 1667|->         sss_erase_mem_securely((void *)answer, strlen(answer));
# 1668|           free(answer);
# 1669|           answer=NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def187]
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'prompt_2fa_single'
sssd-2.12.0/src/sss_client/pam_sss.c:1839:9: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 1837|       } else {
# 1838|           pi->pam_authtok = strdup(answer);
# 1839|->         sss_erase_mem_securely((void *)answer, strlen(answer));
# 1840|           free(answer);
# 1841|           answer=NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def188]
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'keep_authtok_data'
sssd-2.12.0/src/sss_client/pam_sss.c:2788:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_type'
# 2786|       *authtok_type = pi->pam_authtok_type;
# 2787|   
# 2788|->     pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_TYPE, authtok_type,
# 2789|                                 free_exp_data);
# 2790|       if (pam_status != PAM_SUCCESS) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def189]
sssd-2.12.0/src/sss_client/pam_sss.c:2803:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_size'
# 2801|       *authtok_size = pi->pam_authtok_size;
# 2802|   
# 2803|->     pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_SIZE, authtok_size,
# 2804|                                 free_exp_data);
# 2805|       if (pam_status != PAM_SUCCESS) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def190]
sssd-2.12.0/src/sss_client/pam_sss.c:2818:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_data'
# 2816|       memcpy(authtok_data, pi->pam_authtok, pi->pam_authtok_size);
# 2817|   
# 2818|->     pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_DATA, authtok_data,
# 2819|                                 free_exp_data);
# 2820|       if (pam_status != PAM_SUCCESS) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def191]
sssd-2.12.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'pam_sm_authenticate'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:50:9: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
/usr/include/shadow.h:32: included_from: Included from here.
/usr/include/security/pam_modutil.h:53: included_from: Included from here.
sssd-2.12.0/src/sss_client/sss_pam_compat.h:31: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_gss.c:37: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.12.0/src/sss_client/sss_pam_compat.h:35: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
#   48|       if (debug_enabled) { \
#   49|           pam_error(pamh, "pam_sss_gss: " fmt, ## __VA_ARGS__); \
#   50|->         pam_syslog(pamh, LOG_ERR, fmt, ## __VA_ARGS__); \
#   51|       } \
#   52|   } while (0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def192]
sssd-2.12.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'get_item_as_string'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:79:11: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:25: included_from: Included from here.
#   77|       int ret;
#   78|   
#   79|->     ret = pam_get_item(pamh, item, (void *)&str);
#   80|       if (ret != PAM_SUCCESS || str == NULL || str[0] == '\0') {
#   81|           return NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def193]
sssd-2.12.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_gssapi_init_send'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:224:11: warning[-Wanalyzer-malloc-leak]: leak of 'data'
#  222|       req_data.data = data;
#  223|   
#  224|->     ret = sss_pam_make_request(SSS_GSSAPI_INIT, &req_data, &reply, &reply_len,
#  225|                                  &ret_errno);
#  226|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def194]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'domain'
#  279|   
#  280|       dlen = reply_len;
#  281|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
#  282|                                     NULL);
#  283|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def195]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
#  279|   
#  280|       dlen = reply_len;
#  281|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
#  282|                                     NULL);
#  283|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def196]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
#  279|   
#  280|       dlen = reply_len;
#  281|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
#  282|                                     NULL);
#  283|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def197]
sssd-2.12.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_gssapi_init_recv'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'username'
#  279|   
#  280|       dlen = reply_len;
#  281|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
#  282|                                     NULL);
#  283|       if (ret != EOK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def198]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'domain'
#  286|   
#  287|       dlen = reply_len;
#  288|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
#  289|       if (ret != EOK) {
#  290|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def199]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
#  286|   
#  287|       dlen = reply_len;
#  288|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
#  289|       if (ret != EOK) {
#  290|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def200]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
#  286|   
#  287|       dlen = reply_len;
#  288|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
#  289|       if (ret != EOK) {
#  290|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def201]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:294:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
#  292|   
#  293|       dlen = reply_len;
#  294|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &target, NULL);
#  295|       if (ret != EOK) {
#  296|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def202]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:294:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
#  292|   
#  293|       dlen = reply_len;
#  294|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &target, NULL);
#  295|       if (ret != EOK) {
#  296|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def203]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:300:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
#  298|   
#  299|       dlen = reply_len;
#  300|->     ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &upn, NULL);
#  301|       if (ret != EOK) {
#  302|           goto done;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def204]
sssd-2.12.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_establish_sec_ctx_send'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:381:11: warning[-Wanalyzer-malloc-leak]: leak of 'data'
#  379|   
#  380|       req_data.data = data;
#  381|->     ret = sss_pam_make_request(SSS_GSSAPI_SEC_CTX, &req_data, (uint8_t**)_reply,
#  382|                                  _reply_len, &ret_errno);
#  383|       free(data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def205]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:585:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
#  583|   
#  584|   done:
#  585|->     sss_pam_lock();
#  586|       sss_cli_close_socket();
#  587|       sss_pam_unlock();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def206]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:586:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
#  584|   done:
#  585|       sss_pam_lock();
#  586|->     sss_cli_close_socket();
#  587|       sss_pam_unlock();
#  588|       free(username);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def207]
sssd-2.12.0/src/sss_client/pam_sss_gss.c:587:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.12.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
#  585|       sss_pam_lock();
#  586|       sss_cli_close_socket();
#  587|->     sss_pam_unlock();
#  588|       free(username);
#  589|       free(domain);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def208]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:266:11: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.12.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  264|       for (c = 0; *pc_list != NULL && (*pc_list)[c] != NULL; c++); /* just counting */
#  265|   
#  266|->     pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  267|       if (pcl == NULL) {
#  268|           return ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def209]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:266:11: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  264|       for (c = 0; *pc_list != NULL && (*pc_list)[c] != NULL; c++); /* just counting */
#  265|   
#  266|->     pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  267|       if (pcl == NULL) {
#  268|           return ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def210]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:270:12: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  268|           return ENOMEM;
#  269|       }
#  270|->     pcl[c] = pc;
#  271|       pcl[c + 1] = NULL;
#  272|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def211]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:270:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  268|           return ENOMEM;
#  269|       }
#  270|->     pcl[c] = pc;
#  271|       pcl[c + 1] = NULL;
#  272|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def212]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:276:1: warning[-Wanalyzer-malloc-leak]: leak of 'pcl'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  274|   
#  275|       return EOK;
#  276|-> }
#  277|   
#  278|   #define DEFAULT_PASSWORD_PROMPT _("Password: ")

Error: GCC_ANALYZER_WARNING (CWE-401): [#def213]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:276:1: warning[-Wanalyzer-malloc-leak]: leak of ‘pcl’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  274|   
#  275|       return EOK;
#  276|-> }
#  277|   
#  278|   #define DEFAULT_PASSWORD_PROMPT _("Password: ")

Error: GCC_ANALYZER_WARNING (CWE-401): [#def214]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_password'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:307:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_password'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  305|   
#  306|       ret = pc_list_add_pc(pc_list, pc);
#  307|->     if (ret != EOK) {
#  308|           goto done;
#  309|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def215]
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_password’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:307:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c:713:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.12.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_password’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.12.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  305|   
#  306|       ret = pc_list_add_pc(pc_list, pc);
#  307|->     if (ret != EOK) {
#  308|           goto done;
#  309|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def216]
sssd-2.12.0/src/sss_client/sssd_pac.c: scope_hint: In function 'sssdpac_import_authdata'
sssd-2.12.0/src/sss_client/sssd_pac.c:100:9: warning[-Wanalyzer-malloc-leak]: leak of 'data'
#   98|   
#   99|       if (sssdctx->data.data != NULL) {
#  100|->         krb5_free_data_contents(kcontext, &sssdctx->data);
#  101|       }
#  102|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def217]
sssd-2.12.0/src/sss_client/sssd_pac.c: scope_hint: In function 'sssdpac_internalize'
sssd-2.12.0/src/sss_client/sssd_pac.c:283:12: warning[-Wanalyzer-malloc-leak]: leak of 'data.data'
#  281|   
#  282|       /* verified */
#  283|->     code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
#  284|       if (code != 0) {
#  285|           free(data.data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def218]
sssd-2.12.0/src/sss_client/sssd_pac.c:290:9: warning[-Wanalyzer-malloc-leak]: leak of 'data.data'
#  288|   
#  289|       if (sssdctx->data.data != NULL) {
#  290|->         krb5_free_data_contents(kcontext, &sssdctx->data);
#  291|       }
#  292|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def219]
sssd-2.12.0/src/tools/sssctl/sssctl_user_checks.c: scope_hint: In function ‘sss_getpwnam_check’
sssd-2.12.0/src/tools/sssctl/sssctl_user_checks.c:191:14: warning[-Wanalyzer-malloc-leak]: leak of ‘buffer’
#  189|       }
#  190|   
#  191|->     status = sss_getpwnam_r(user, &pwd, buffer, buflen, &nss_errno);
#  192|       if (status != NSS_STATUS_SUCCESS) {
#  193|           ERROR("sss_getpwnam_r failed with [%d].\n", status);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def220]
sssd-2.12.0/src/tools/tools_mc_util.c: scope_hint: In function ‘sss_memcache_invalidate’
sssd-2.12.0/src/tools/tools_mc_util.c:92:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(mc_filename, 2)’
#   90|       }
#   91|   
#   92|->     ret = sss_br_lock_file(mc_fd, 0, 1, retries, t);
#   93|       if (ret == EACCES) {
#   94|           DEBUG(SSSDBG_TRACE_FUNC,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def221]
sssd-2.12.0/src/util/util.h:54: included_from: Included from here.
sssd-2.12.0/src/util/sss_krb5.h:36: included_from: Included from here.
sssd-2.12.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:36: included_from: Included from here.
sssd-2.12.0/src/krb5_plugin/sssd_krb5_locator_plugin.c: scope_hint: In function 'get_krb5info'
sssd-2.12.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(krb5info_name, 0)'
sssd-2.12.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
#   35|   ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
#   36|   
#   37|-> #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|   #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def222]
sssd-2.12.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.12.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
#   35|   ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
#   36|   
#   37|-> #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|   #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def223]
sssd-2.12.0/src/util/util.h:54: included_from: Included from here.
sssd-2.12.0/src/providers/be_netlink.c:37: included_from: Included from here.
sssd-2.12.0/src/providers/be_netlink.c: scope_hint: In function ‘has_ethernet_encapsulation’
sssd-2.12.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&type_path, 0)’
sssd-2.12.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.12.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.12.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.12.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
#   35|   ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
#   36|   
#   37|-> #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|   #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def224]
sssd-2.12.0/src/util/util.h:54: included_from: Included from here.
sssd-2.12.0/src/tools/sss_seed.c:33: included_from: Included from here.
sssd-2.12.0/src/tools/sss_seed.c: scope_hint: In function ‘seed_password_input_file’
sssd-2.12.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(filename, 0)’
sssd-2.12.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.12.0/src/tools/sss_seed.c:23: included_from: Included from here.
sssd-2.12.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.12.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
#   35|   ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
#   36|   
#   37|-> #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|   #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def225]
sssd-2.12.0/src/sss_client/pam_sss.c:53: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss.c: scope_hint: In function 'display_pw_reset_message.part.0'
sssd-2.12.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-malloc-leak]: leak of 'msg_buf'
sssd-2.12.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/sss_client/pam_sss.c:32: included_from: Included from here.
sssd-2.12.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.12.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
#   35|   ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
#   36|   
#   37|-> #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|   #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def226]
sssd-2.12.0/src/util/util.h:54: included_from: Included from here.
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:22: included_from: Included from here.
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c: scope_hint: In function ‘sss_mc_save_corrupted’
sssd-2.12.0/src/util/atomic_io.h:38:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘creat(talloc_asprintf(talloc_named_const(0, 0, "talloc_new: src/responder/nss/nsssrv_mmap_cache.c:138"), "%s_%s", *mc_ctx.file, "corrupted"), 384)’
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.12.0/src/util/util.h:45: included_from: Included from here.
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.12.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
#   36|   
#   37|   #define sss_atomic_read_s(fd, buf, n)  sss_atomic_io_s(fd, buf, n, true)
#   38|-> #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
#   39|   
#   40|   /**

Error: GCC_ANALYZER_WARNING (CWE-775): [#def227]
sssd-2.12.0/src/util/backup_file.c: scope_hint: In function 'backup_file'
sssd-2.12.0/src/util/backup_file.c:57:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.12.0/src/util/util.h:45: included_from: Included from here.
sssd-2.12.0/src/util/backup_file.c:22: included_from: Included from here.
#   55|       for (i = 0; i < 10; i++) {
#   56|           if (i == 0) {
#   57|->             dst_file = talloc_asprintf(tmp_ctx, "%s.bak", src_file);
#   58|           } else {
#   59|               dst_file = talloc_asprintf(tmp_ctx, "%s.bak%d", src_file, i);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def228]
sssd-2.12.0/src/util/backup_file.c:59:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.12.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.12.0/src/util/util.h:54: included_from: Included from here.
#   57|               dst_file = talloc_asprintf(tmp_ctx, "%s.bak", src_file);
#   58|           } else {
#   59|->             dst_file = talloc_asprintf(tmp_ctx, "%s.bak%d", src_file, i);
#   60|           }
#   61|           if (!dst_file) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def229]
sssd-2.12.0/src/util/backup_file.c:67:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
#   65|   
#   66|           errno = 0;
#   67|->         dst_fd = open(dst_file, O_CREAT|O_EXCL|O_WRONLY, 0600);
#   68|           ret = errno;
#   69|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def230]
sssd-2.12.0/src/util/backup_file.c:116:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
#  114|   
#  115|   done:
#  116|->     if (src_fd != -1) close(src_fd);
#  117|       if (dst_fd != -1) close(dst_fd);
#  118|       talloc_free(tmp_ctx);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def231]
sssd-2.12.0/src/util/child_handlers.c: scope_hint: In function 'exec_child_ex'
sssd-2.12.0/src/util/child_handlers.c:459:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
#  457|       if ((pipefd_from_child != NULL) && (pipefd_from_child[1] != -1)
#  458|           && (child_out_fd != -1)) {
#  459|->         close(pipefd_from_child[0]);
#  460|           ret = dup2(pipefd_from_child[1], child_out_fd);
#  461|           if (ret == -1) {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def232]
sssd-2.12.0/src/util/debug.c: scope_hint: In function 'journal_send'
sssd-2.12.0/src/util/debug.c:248:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/util/debug.c:37: included_from: Included from here.
sssd-2.12.0/src/util/debug.c:288:14: note: in expansion of macro 'DEBUG_IS_SET'
#  246|        * source code location and other tracking data.
#  247|        */
#  248|->     res = sd_journal_send_with_location(
#  249|               code_file, code_line, function,
#  250|               "MESSAGE=%s", message,

Error: GCC_ANALYZER_WARNING (CWE-404): [#def233]
sssd-2.12.0/src/util/debug.c: scope_hint: In function 'sss_vdebug_fn'
sssd-2.12.0/src/util/debug.c:322:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/util/debug.c:288:14: note: in expansion of macro 'DEBUG_IS_SET'
#  320|               /* Emergency fallback, send to STDERR */
#  321|               vfprintf(stderr, format, ap_fallback);
#  322|->             fflush(stderr);
#  323|           }
#  324|           va_end(ap_fallback);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def234]
sssd-2.12.0/src/util/debug.c:345:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  343|           }
#  344|           if (debug_microseconds == SSSDBG_MICROSECONDS_ENABLED) {
#  345|->             sss_debug_backtrace_printf(level, "%s:%.6ld): ",
#  346|                                          last_time_str, tv.tv_usec);
#  347|           } else {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def235]
sssd-2.12.0/src/util/debug.c:348:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
#  346|                                          last_time_str, tv.tv_usec);
#  347|           } else {
#  348|->             sss_debug_backtrace_printf(level, "%s): ", last_time_str);
#  349|           }
#  350|       }

Error: GCC_ANALYZER_WARNING (CWE-404): [#def236]
sssd-2.12.0/src/util/debug.c:352:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/util/debug.c:482:5: note: in expansion of macro 'DEBUG'
#  350|       }
#  351|   
#  352|->     sss_debug_backtrace_printf(level, "[%s] [%s] (%#.4x): ",
#  353|                                  debug_prg_name, function, level);
#  354|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def237]
sssd-2.12.0/src/util/debug.c: scope_hint: In function 'open_debug_file_ex'
sssd-2.12.0/src/util/debug.c:426:17: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(logpath, "a")'
#  424|   
#  425|       if(want_cloexec) {
#  426|->         flags = fcntl(debug_fd, F_GETFD, 0);
#  427|           (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
#  428|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def238]
sssd-2.12.0/src/util/debug.c:426:17: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(logpath, "a")'
#  424|   
#  425|       if(want_cloexec) {
#  426|->         flags = fcntl(debug_fd, F_GETFD, 0);
#  427|           (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
#  428|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def239]
sssd-2.12.0/src/util/debug.c:427:16: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(logpath, "a")'
#  425|       if(want_cloexec) {
#  426|           flags = fcntl(debug_fd, F_GETFD, 0);
#  427|->         (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
#  428|       }
#  429|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def240]
sssd-2.12.0/src/util/debug.c:427:16: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(logpath, "a")'
#  425|       if(want_cloexec) {
#  426|           flags = fcntl(debug_fd, F_GETFD, 0);
#  427|->         (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
#  428|       }
#  429|   

Error: GCC_ANALYZER_WARNING (CWE-910): [#def241]
sssd-2.12.0/src/util/debug.c: scope_hint: In function 'rotate_debug_files'
sssd-2.12.0/src/util/debug.c:449:19: warning[-Wanalyzer-double-fclose]: double 'fclose' of FILE '_sss_debug_file'
/usr/include/systemd/_sd-common.h:20: included_from: Included from here.
/usr/include/systemd/sd-journal.h:23: included_from: Included from here.
sssd-2.12.0/src/util/debug.c:34: included_from: Included from here.
#  447|           do {
#  448|               error = 0;
#  449|->             ret = fclose(_sss_debug_file);
#  450|               if (ret != 0) {
#  451|                   error = errno;

Error: GCC_ANALYZER_WARNING (CWE-415): [#def242]
sssd-2.12.0/src/util/debug.c:449:19: warning[-Wanalyzer-double-free]: double-'fclose' of '_sss_debug_file'
#  447|           do {
#  448|               error = 0;
#  449|->             ret = fclose(_sss_debug_file);
#  450|               if (ret != 0) {
#  451|                   error = errno;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def243]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.12.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def244]
sssd-2.12.0/src/util/child_handlers.c: scope_hint: In function 'sss_child_start'
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def245]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def246]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def247]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def248]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/util/child_common.h:34: included_from: Included from here.
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:27: included_from: Included from here.
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:856:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:856:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:856:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/providers/ipa/ipa_subdomains_server.c:856:9: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def249]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/responder/common/responder_common.c:36: included_from: Included from here.
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
sssd-2.12.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/responder/common/responder_common.c:31: included_from: Included from here.
sssd-2.12.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def250]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/tools/common/sss_process.c:25: included_from: Included from here.
sssd-2.12.0/src/tools/common/sss_process.c: scope_hint: In function 'sss_pid'
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("/run/sssd/sssd.pid", "r")'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def251]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/tools/common/sss_process.c:25: included_from: Included from here.
sssd-2.12.0/src/tools/common/sss_process.c: scope_hint: In function ‘sss_pid’
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("/run/sssd/sssd.pid", "r")’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def252]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of 'fopen("/run/sssd/sssd.pid", "r")'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def253]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def254]
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("/run/sssd/sssd.pid", "r")’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def255]
sssd-2.12.0/src/util/child_bootstrap.h:27: included_from: Included from here.
sssd-2.12.0/src/providers/proxy/proxy_child.c:42: included_from: Included from here.
sssd-2.12.0/src/providers/proxy/proxy_child.c: scope_hint: In function ‘proxy_internal_conv’
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-476): [#def256]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/providers/ad/ad_gpo.c:39: included_from: Included from here.
sssd-2.12.0/src/providers/ad/ad_gpo.c: scope_hint: In function 'ad_gpo_filter_gpos_by_cse_guid'
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-null-dereference]: dereference of NULL 'dacl_filtered_gpo'
sssd-2.12.0/src/providers/ad/ad_gpo.c:1322:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/util.h:45: included_from: Included from here.
sssd-2.12.0/src/providers/ad/ad_gpo.c:1330:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/providers/ad/ad_gpo.c:1322:9: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-404): [#def257]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/sbus/request/sbus_message.c:25: included_from: Included from here.
sssd-2.12.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_message_bound'
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.12.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/sbus/request/sbus_message.c:22: included_from: Included from here.
sssd-2.12.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-404): [#def258]
sssd-2.12.0/src/util/util.h:58: included_from: Included from here.
sssd-2.12.0/src/providers/data_provider.h:40: included_from: Included from here.
sssd-2.12.0/src/providers/backend.h:25: included_from: Included from here.
sssd-2.12.0/src/providers/data_provider/dp.h:27: included_from: Included from here.
sssd-2.12.0/src/providers/data_provider/dp_targets.c:25: included_from: Included from here.
sssd-2.12.0/src/providers/data_provider/dp_targets.c: scope_hint: In function ‘_dp_target_enabled’
sssd-2.12.0/src/util/debug.h:138:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
sssd-2.12.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.12.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
#  136|   */
#  137|   #define DEBUG(level, format, ...) do { \
#  138|->     sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
#  139|                    level, \
#  140|                    format, ##__VA_ARGS__); \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def259]
sssd-2.12.0/src/util/files.c: scope_hint: In function 'remove_tree_with_ctx'
sssd-2.12.0/src/util/files.c:143:22: warning[-Wanalyzer-malloc-leak]: leak of 'fdopendir(sss_openat_cloexec(parent_fd,  dir_name, 196608, & ret))'
#  141|       }
#  142|   
#  143|->     while ((result = readdir(rootdir)) != NULL) {
#  144|           if (strcmp(result->d_name, ".") == 0 ||
#  145|               strcmp(result->d_name, "..") == 0) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def260]
sssd-2.12.0/src/util/find_uid.c: scope_hint: In function 'get_active_uid_linux'
sssd-2.12.0/src/util/find_uid.c:256:22: warning[-Wanalyzer-malloc-leak]: leak of 'opendir("/proc")'
sssd-2.12.0/src/util/find_uid.c:28: included_from: Included from here.
#  254|   
#  255|       errno = 0;
#  256|->     while ((dirent = readdir(proc_dir)) != NULL) {
#  257|           if (only_numbers(dirent->d_name) != 0) {
#  258|               continue;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def261]
sssd-2.12.0/src/util/find_uid.c: scope_hint: In function ‘get_active_uid_linux’
sssd-2.12.0/src/util/find_uid.c:256:22: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("/proc")’
sssd-2.12.0/src/util/find_uid.c:28: included_from: Included from here.
#  254|   
#  255|       errno = 0;
#  256|->     while ((dirent = readdir(proc_dir)) != NULL) {
#  257|           if (only_numbers(dirent->d_name) != 0) {
#  258|               continue;

Error: COMPILER_WARNING (CWE-704): [#def262]
sssd-2.12.0/src/util/util.c: scope_hint: In function 'domain_to_basedn'
sssd-2.12.0/src/util/util.c:574:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  574 |     while ((p = strchr(s, '.'))) {
#      |               ^
#  572|       dn = talloc_strdup(memctx, "dc=");
#  573|   
#  574|->     while ((p = strchr(s, '.'))) {
#  575|           l = p - s;
#  576|           dn = talloc_asprintf_append_buffer(dn, "%.*s,dc=", l, s);

Error: COMPILER_WARNING (CWE-704): [#def263]
sssd-2.12.0/src/util/util.c: scope_hint: In function ‘domain_to_basedn’
sssd-2.12.0/src/util/util.c:574:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  574 |     while ((p = strchr(s, '.'))) {
#      |               ^
#  572|       dn = talloc_strdup(memctx, "dc=");
#  573|   
#  574|->     while ((p = strchr(s, '.'))) {
#  575|           l = p - s;
#  576|           dn = talloc_asprintf_append_buffer(dn, "%.*s,dc=", l, s);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def264]
sssd-2.12.0/src/util/child_common.h:34: included_from: Included from here.
sssd-2.12.0/src/util/child_handlers.c:36: included_from: Included from here.
sssd-2.12.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
#  125|   #define FD_CLOSE(fd) do {           \
#  126|       if (fd != -1) {                 \
#  127|->         close(fd);                  \
#  128|           fd = -1;                    \
#  129|       }                               \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def265]
sssd-2.12.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
#  125|   #define FD_CLOSE(fd) do {           \
#  126|       if (fd != -1) {                 \
#  127|->         close(fd);                  \
#  128|           fd = -1;                    \
#  129|       }                               \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def266]
sssd-2.12.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
#  125|   #define FD_CLOSE(fd) do {           \
#  126|       if (fd != -1) {                 \
#  127|->         close(fd);                  \
#  128|           fd = -1;                    \
#  129|       }                               \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def267]
sssd-2.12.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.12.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
#  125|   #define FD_CLOSE(fd) do {           \
#  126|       if (fd != -1) {                 \
#  127|->         close(fd);                  \
#  128|           fd = -1;                    \
#  129|       }                               \

Scan Properties