Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
util-linux-2.42.start/disk-utils/cfdisk.c:2182:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc(fdisk_get_nlabels(*cf.cxt) + 1, 32) + i * 32’
util-linux-2.42.start/disk-utils/cfdisk.c:267:25: note: in expansion of macro ‘__UL_DBG’
util-linux-2.42.start/disk-utils/cfdisk.c:2170:9: note: in expansion of macro ‘DBG’
# 2180|   		    fdisk_label_get_type(lb) == FDISK_DISKLABEL_BSD)
# 2181|   			continue;
# 2182|-> 		cm[i++].name = fdisk_label_get_name(lb);
# 2183|   	}
# 2184|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
util-linux-2.42.start/disk-utils/cfdisk.c:2182:32: warning[-Wanalyzer-malloc-leak]: leak of ‘xcalloc(fdisk_get_nlabels(*cf.cxt) + 1, 32) + i * 32’
util-linux-2.42.start/disk-utils/cfdisk.c:267:25: note: in expansion of macro ‘__UL_DBG’
util-linux-2.42.start/disk-utils/cfdisk.c:2170:9: note: in expansion of macro ‘DBG’
# 2180|   		    fdisk_label_get_type(lb) == FDISK_DISKLABEL_BSD)
# 2181|   			continue;
# 2182|-> 		cm[i++].name = fdisk_label_get_name(lb);
# 2183|   	}
# 2184|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
util-linux-2.42.start/login-utils/last.c:48: included_from: Included from here.
util-linux-2.42.start/include/xalloc.h: scope_hint: In function ‘xstrdup’
util-linux-2.42.start/include/xalloc.h:95:17: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(8) + nfiles * 8’
util-linux-2.42.start/include/optutils.h:8: included_from: Included from here.
util-linux-2.42.start/login-utils/last.c:46: included_from: Included from here.
#   93|   	ret = strdup(str);
#   94|   	if (!ret)
#   95|-> 		err(XALLOC_EXIT_CODE, "cannot duplicate string");
#   96|   	return ret;
#   97|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
util-linux-2.42.start/login-utils/chfn.c: scope_hint: In function ‘parse_passwd’
util-linux-2.42.start/login-utils/chfn.c:219:1: warning[-Wanalyzer-malloc-leak]: leak of ‘gecos’
util-linux-2.42.start/login-utils/chfn.c:44: included_from: Included from here.
util-linux-2.42.start/include/c.h:23: included_from: Included from here.
util-linux-2.42.start/login-utils/chfn.c:35: included_from: Included from here.
#  217|   	 *  not be changed by this version of chfn.  */
#  218|   	gecos_fields[GECOS_OTHER].current = strsep(&gecos, ",");
#  219|-> }
#  220|   
#  221|   /*

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.1
analyzer-version-gcc-analyzer16.0.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.1
diffbase-analyzer-version-gcc-analyzer16.0.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-205.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260119.105402.g7a5be1b.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameutil-linux-2.42.start-7.20260119115118703208.master.1203.g223cb52c5
diffbase-store-results-to/tmp/tmp5hrnykm7/util-linux-2.42.start-7.20260119115118703208.master.1203.g223cb52c5.tar.xz
diffbase-time-created2026-01-19 17:07:17
diffbase-time-finished2026-01-19 17:24:36
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp5hrnykm7/util-linux-2.42.start-7.20260119115118703208.master.1203.g223cb52c5.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp5hrnykm7/util-linux-2.42.start-7.20260119115118703208.master.1203.g223cb52c5.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-205.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260119.105402.g7a5be1b.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameutil-linux-2.42.start-7.20260119165345242890.pr3968.1218.g0949fbd77
store-results-to/tmp/tmpaplv6654/util-linux-2.42.start-7.20260119165345242890.pr3968.1218.g0949fbd77.tar.xz
time-created2026-01-19 17:25:01
time-finished2026-01-19 17:42:47
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpaplv6654/util-linux-2.42.start-7.20260119165345242890.pr3968.1218.g0949fbd77.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpaplv6654/util-linux-2.42.start-7.20260119165345242890.pr3968.1218.g0949fbd77.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9