Task #96520 - sssd-2.13.0-99.20260131100323422880.master.34.g308af8f21/scan-results.err
back to task #96520download
Error: GCC_ANALYZER_WARNING (CWE-457):
sssd-2.13.0/src/db/sysdb_ops.c: scope_hint: In function 'sysdb_search_entry.part.0'
sssd-2.13.0/src/db/sysdb_ops.c:322:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*_msgs'
sssd-2.13.0/src/db/sysdb_private.h:128: included_from: Included from here.
sssd-2.13.0/src/db/sysdb_ops.c:25: included_from: Included from here.
sssd-2.13.0/src/db/sysdb_ops.c:288:15: note: in expansion of macro 'sysdb_error_to_errno'
# 320| }
# 321|
# 322|-> return sysdb_merge_msg_list_ts_attrs(sysdb, *_msgs_count, *_msgs,
# 323| attrs);
# 324| }
Error: GCC_ANALYZER_WARNING (CWE-476):
sssd-2.13.0/src/db/sysdb_search.c: scope_hint: In function 'mpg_convert'
sssd-2.13.0/src/db/sysdb_search.c:1038:15: warning[-Wanalyzer-null-dereference]: dereference of NULL 'val'
# 1036|
# 1037| /* yes, convert */
# 1038|-> val->data = (uint8_t *)talloc_strdup(msg, SYSDB_GROUP_CLASS);
# 1039| if (val->data == NULL) return ENOMEM;
# 1040| val->length = strlen(SYSDB_GROUP_CLASS);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_config_init'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:195:11: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 193| }
# 194|
# 195|-> ret = krb5_unparse_name_flags(kctx, princ, 0, &username);
# 196| if (ret != 0) {
# 197| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:195:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
# 193| }
# 194|
# 195|-> ret = krb5_unparse_name_flags(kctx, princ, 0, &username);
# 196| if (ret != 0) {
# 197| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:201:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 199|
# 200| config->username = strdup(username);
# 201|-> krb5_free_unparsed_name(kctx, username);
# 202| if (config->username == NULL) {
# 203| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:201:5: warning[-Wanalyzer-malloc-leak]: leak of 'config'
# 199|
# 200| config->username = strdup(username);
# 201|-> krb5_free_unparsed_name(kctx, username);
# 202| if (config->username == NULL) {
# 203| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_set_cookie'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:244:12: warning[-Wanalyzer-malloc-leak]: leak of 'blob'
sssd-2.13.0/src/util/util.h:53: included_from: Included from here.
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:31: included_from: Included from here.
sssd-2.13.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.13.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:237:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_set_cookie'
# 242| cookie.length = len;
# 243|
# 244|-> return cb->set_cookie(context, rock, pa_type, &cookie);
# 245| }
# 246|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_get_complete_attr'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:313:16: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)data.length)'
# 311| memindex = 0;
# 312| do {
# 313|-> rmsg = krad_packet_get_attr(rres, attr, i);
# 314| if (rmsg != NULL) {
# 315| memcpy(&data.data[memindex], rmsg->data, rmsg->length);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:427:11: warning[-Wanalyzer-malloc-leak]: leak of 'client'
# 425| memset(client, 0, sizeof(struct sss_radiuskdc_client));
# 426|
# 427|-> ret = krad_client_new(kctx, vctx, &client->client);
# 428| if (ret != 0) {
# 429| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_client_init'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:427:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 425| memset(client, 0, sizeof(struct sss_radiuskdc_client));
# 426|
# 427|-> ret = krad_client_new(kctx, vctx, &client->client);
# 428| if (ret != 0) {
# 429| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:432:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 430| }
# 431|
# 432|-> ret = krad_attrset_new(kctx, &client->attrs);
# 433| if (ret != 0) {
# 434| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:444:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 442| data.data = hostname;
# 443| data.length = strlen(hostname);
# 444|-> ret = krad_attrset_add(client->attrs, krad_attr_name2num("NAS-Identifier"),
# 445| &data);
# 446| if (ret != 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:450:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 448| }
# 449|
# 450|-> ret = krad_attrset_add_number(client->attrs, krad_attr_name2num("Service-Type"),
# 451| KRAD_SERVICE_TYPE_AUTHENTICATE_ONLY);
# 452| if (ret != 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:458:11: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 456| data.data = config->username;
# 457| data.length = strlen(config->username);
# 458|-> ret = krad_attrset_add(client->attrs, krad_attr_name2num("User-Name"),
# 459| &data);
# 460| if (ret != 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_challenge_init'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:505:47: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 503|
# 504| state->client = sss_radiuskdc_client_init(kctx,
# 505|-> cb->event_context(kctx, rock),
# 506| config);
# 507| if (state->client == NULL) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_verify_free.part.0'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:522:5: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 520| }
# 521|
# 522|-> sss_string_array_free(state->indicators);
# 523| sss_radiuskdc_client_free(state->client);
# 524| free(state);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c: scope_hint: In function 'sss_radiuskdc_verify_init'
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:552:25: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 550| state->arg = arg;
# 551|
# 552|-> state->indicators = sss_string_array_copy(indicators);
# 553| if (state->indicators == NULL) {
# 554| sss_radiuskdc_verify_free(state);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/radius_kdcpreauth.c:559:47: warning[-Wanalyzer-malloc-leak]: leak of 'state'
# 557|
# 558| state->client = sss_radiuskdc_client_init(kctx,
# 559|-> cb->event_context(kctx, rock),
# 560| config);
# 561| if (state->client == NULL) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 91|
# 92| json_array_foreach(jarray, i, jval) {
# 93|-> strval = json_string_value(jval);
# 94| if (strval == NULL) {
# 95| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c: scope_hint: In function 'sss_json_array_to_strings'
sssd-2.13.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of 'array'
sssd-2.13.0/src/krb5_plugin/common/utils.c:26: included_from: Included from here.
# 91|
# 92| json_array_foreach(jarray, i, jval) {
# 93|-> strval = json_string_value(jval);
# 94| if (strval == NULL) {
# 95| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 91|
# 92| json_array_foreach(jarray, i, jval) {
# 93|-> strval = json_string_value(jval);
# 94| if (strval == NULL) {
# 95| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c: scope_hint: In function ‘sss_json_array_to_strings’
sssd-2.13.0/src/krb5_plugin/common/utils.c:93:18: warning[-Wanalyzer-malloc-leak]: leak of ‘array’
sssd-2.13.0/src/krb5_plugin/common/utils.c:26: included_from: Included from here.
# 91|
# 92| json_array_foreach(jarray, i, jval) {
# 93|-> strval = json_string_value(jval);
# 94| if (strval == NULL) {
# 95| goto fail;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c: scope_hint: In function 'sss_radius_encode_padata'
sssd-2.13.0/src/krb5_plugin/common/utils.c:199:11: warning[-Wanalyzer-malloc-leak]: leak of 'array'
# 197| char *str;
# 198|
# 199|-> str = fn(data);
# 200| if (str == NULL) {
# 201| return NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/common/utils.c: scope_hint: In function ‘sss_radius_encode_padata’
sssd-2.13.0/src/krb5_plugin/common/utils.c:199:11: warning[-Wanalyzer-malloc-leak]: leak of ‘array’
# 197| char *str;
# 198|
# 199|-> str = fn(data);
# 200| if (str == NULL) {
# 201| return NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:32: included_from: Included from here.
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_from_json_object'
sssd-2.13.0/src/krb5_plugin/common/utils.h:27:46: warning[-Wanalyzer-malloc-leak]: leak of 'sss_passkey_challenge_init(jdata.domain, credential_id_list, jdata.user_verification, jdata.cryptographic_challenge)'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro 'is_empty'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro 'is_empty'
# 25| #include <krb5/preauth_plugin.h>
# 26|
# 27|-> #define is_empty(var) ((var) == NULL || (var)[0] == '\0')
# 28|
# 29| void
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:32: included_from: Included from here.
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_from_json_object’
sssd-2.13.0/src/krb5_plugin/common/utils.h:27:46: warning[-Wanalyzer-malloc-leak]: leak of ‘sss_passkey_challenge_init(jdata.domain, credential_id_list, jdata.user_verification, jdata.cryptographic_challenge)’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro ‘is_empty’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:128:9: note: in expansion of macro ‘is_empty’
# 25| #include <krb5/preauth_plugin.h>
# 26|
# 27|-> #define is_empty(var) ((var) == NULL || (var)[0] == '\0')
# 28|
# 29| void
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_clpreauth.c: scope_hint: In function 'sss_idpcl_process'
sssd-2.13.0/src/krb5_plugin/idp/idp_clpreauth.c:195:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 193| }
# 194|
# 195|-> cb->disable_fallback(context, rock);
# 196| *_pa_data_out = padata;
# 197|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_clpreauth.c:195:7: warning[-Wanalyzer-malloc-leak]: leak of 'sss_idpcl_encode_padata()'
# 193| }
# 194|
# 195|-> cb->disable_fallback(context, rock);
# 196| *_pa_data_out = padata;
# 197|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_kdcpreauth.c: scope_hint: In function 'sss_idpkdc_config_init'
sssd-2.13.0/src/krb5_plugin/idp/idp_kdcpreauth.c:75:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
# 73| memset(config, 0, sizeof(struct sss_idpkdc_config));
# 74|
# 75|-> ret = sss_radiuskdc_config_init(state, kctx, princ, configstr, &config->radius);
# 76| if (ret != 0) {
# 77| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function 'sss_idp_config_free'
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:46:5: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
# 44| }
# 45|
# 46|-> sss_string_array_free(idpcfg->indicators);
# 47| free(idpcfg);
# 48| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function ‘sss_idp_config_free’
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:46:5: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
# 44| }
# 45|
# 46|-> sss_string_array_free(idpcfg->indicators);
# 47| free(idpcfg);
# 48| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function 'sss_idp_config_init'
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:74:13: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
# 72| memset(idpcfg, 0, sizeof(struct sss_idp_config));
# 73|
# 74|-> jroot = json_loads(config, 0, &jret);
# 75| if (jroot == NULL) {
# 76| ret = EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c: scope_hint: In function ‘sss_idp_config_init’
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:74:13: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
# 72| memset(idpcfg, 0, sizeof(struct sss_idp_config));
# 73|
# 74|-> jroot = json_loads(config, 0, &jret);
# 75| if (jroot == NULL) {
# 76| ret = EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:81:11: warning[-Wanalyzer-malloc-leak]: leak of 'idpcfg'
# 79|
# 80| /* Only one item is supported at the moment. The rest is ignored. */
# 81|-> ret = json_unpack(jroot, "[{s:s, s?:o}]",
# 82| "type", &idpcfg->type,
# 83| "indicators", &jindicators);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/idp/idp_utils.c:81:11: warning[-Wanalyzer-malloc-leak]: leak of ‘idpcfg’
# 79|
# 80| /* Only one item is supported at the moment. The rest is ignored. */
# 81|-> ret = json_unpack(jroot, "[{s:s, s?:o}]",
# 82| "type", &idpcfg->type,
# 83| "indicators", &jindicators);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
# 171| if (buf == NULL) {
# 172| ret = ENOMEM;
# 173|-> return ret;
# 174| }
# 175|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 171| if (buf == NULL) {
# 172| ret = ENOMEM;
# 173|-> return ret;
# 174| }
# 175|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 171| if (buf == NULL) {
# 172| ret = ENOMEM;
# 173|-> return ret;
# 174| }
# 175|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:176:11: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 174| }
# 175|
# 176|-> ret = sss_passkey_concat_credentials(data->credential_id_list,
# 177| &result_creds);
# 178| if (ret != 0) {
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
# 206| /* Child */
# 207| if (cpid == 0) {
# 208|-> close(pipe_to_child[1]);
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 206| /* Child */
# 207| if (cpid == 0) {
# 208|-> close(pipe_to_child[1]);
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 206| /* Child */
# 207| if (cpid == 0) {
# 208|-> close(pipe_to_child[1]);
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
# 206| /* Child */
# 207| if (cpid == 0) {
# 208|-> close(pipe_to_child[1]);
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:208:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 206| /* Child */
# 207| if (cpid == 0) {
# 208|-> close(pipe_to_child[1]);
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
# 211|-> close(pipe_to_parent[0]);
# 212| dup2(pipe_to_parent[1], STDOUT_FILENO);
# 213|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
# 211|-> close(pipe_to_parent[0]);
# 212| dup2(pipe_to_parent[1], STDOUT_FILENO);
# 213|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
# 211|-> close(pipe_to_parent[0]);
# 212| dup2(pipe_to_parent[1], STDOUT_FILENO);
# 213|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:211:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 209| dup2(pipe_to_child[0], STDIN_FILENO);
# 210|
# 211|-> close(pipe_to_parent[0]);
# 212| dup2(pipe_to_parent[1], STDOUT_FILENO);
# 213|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
# 217| * back from child */
# 218| } else {
# 219|-> close(pipe_to_child[0]);
# 220| close(pipe_to_parent[1]);
# 221|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 217| * back from child */
# 218| } else {
# 219|-> close(pipe_to_child[0]);
# 220| close(pipe_to_parent[1]);
# 221|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 217| * back from child */
# 218| } else {
# 219|-> close(pipe_to_child[0]);
# 220| close(pipe_to_parent[1]);
# 221|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
# 217| * back from child */
# 218| } else {
# 219|-> close(pipe_to_child[0]);
# 220| close(pipe_to_parent[1]);
# 221|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:219:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 217| * back from child */
# 218| } else {
# 219|-> close(pipe_to_child[0]);
# 220| close(pipe_to_parent[1]);
# 221|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 218| } else {
# 219| close(pipe_to_child[0]);
# 220|-> close(pipe_to_parent[1]);
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 218| } else {
# 219| close(pipe_to_child[0]);
# 220|-> close(pipe_to_parent[1]);
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[1]'
# 218| } else {
# 219| close(pipe_to_child[0]);
# 220|-> close(pipe_to_parent[1]);
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:220:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 218| } else {
# 219| close(pipe_to_child[0]);
# 220|-> close(pipe_to_parent[1]);
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 220| close(pipe_to_parent[1]);
# 221|
# 222|-> write(pipe_to_child[1], pin, strlen(pin));
# 223| close(pipe_to_child[1]);
# 224|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 220| close(pipe_to_parent[1]);
# 221|
# 222|-> write(pipe_to_child[1], pin, strlen(pin));
# 223| close(pipe_to_child[1]);
# 224|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 220| close(pipe_to_parent[1]);
# 221|
# 222|-> write(pipe_to_child[1], pin, strlen(pin));
# 223| close(pipe_to_child[1]);
# 224|
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wunused-result]: ignoring return value of 'write' declared with attribute 'warn_unused_result'
# 222 | write(pipe_to_child[1], pin, strlen(pin));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 220| close(pipe_to_parent[1]);
# 221|
# 222|-> write(pipe_to_child[1], pin, strlen(pin));
# 223| close(pipe_to_child[1]);
# 224|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
# 223|-> close(pipe_to_child[1]);
# 224|
# 225| size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
# 223|-> close(pipe_to_child[1]);
# 224|
# 225| size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:223:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 221|
# 222| write(pipe_to_child[1], pin, strlen(pin));
# 223|-> close(pipe_to_child[1]);
# 224|
# 225| size = read(pipe_to_parent[0], buf, PASSKEY_CHILD_MSG_CHUNK);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:231:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
# 229| }
# 230|
# 231|-> close(pipe_to_parent[0]);
# 232| wait(NULL);
# 233| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:231:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 229| }
# 230|
# 231|-> close(pipe_to_parent[0]);
# 232| wait(NULL);
# 233| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_clpreauth.c:232:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
# 230|
# 231| close(pipe_to_parent[0]);
# 232|-> wait(NULL);
# 233| }
# 234|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_kdcpreauth.c: scope_hint: In function 'sss_passkeykdc_config_init'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_kdcpreauth.c:75:11: warning[-Wanalyzer-malloc-leak]: leak of 'config'
# 73| memset(config, 0, sizeof(struct sss_passkeykdc_config));
# 74|
# 75|-> ret = sss_radiuskdc_config_init(state, kctx, princ, configstr, &config->radius);
# 76| if (ret != 0) {
# 77| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:42:5: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_free.part.0’
# 40| }
# 41|
# 42|-> sss_string_array_free(passkey->indicators);
# 43| free(passkey);
# 44| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_config_init’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:67:13: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
# 65| memset(passkey, 0, sizeof(struct sss_passkey_config));
# 66|
# 67|-> jroot = json_loads(config, 0, &jret);
# 68| if (jroot == NULL) {
# 69| ret = EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:73:11: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
# 71| }
# 72|
# 73|-> ret = json_unpack(jroot, "[{s?:o}]", "indicators", &jindicators);
# 74| if (ret != 0) {
# 75| ret = EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:81:31: warning[-Wanalyzer-malloc-leak]: leak of ‘passkey’
# 79| /* Are indicators set? */
# 80| if (jindicators != NULL) {
# 81|-> passkey->indicators = sss_json_array_to_strings(jindicators);
# 82| if (passkey->indicators == NULL) {
# 83| ret = EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-416):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_free.part.0'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
# 109| }
# 110|
# 111|-> free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113| sss_string_array_free(data->credential_id_list);
Error: GCC_ANALYZER_WARNING (CWE-416):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 109| }
# 110|
# 111|-> free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113| sss_string_array_free(data->credential_id_list);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of 'data'
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of 'message'
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:113:5: warning[-Wanalyzer-malloc-leak]: leak of ‘message’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 111| free(data->domain);
# 112| free(data->cryptographic_challenge);
# 113|-> sss_string_array_free(data->credential_id_list);
# 114|
# 115| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 113| sss_string_array_free(data->credential_id_list);
# 114|
# 115|-> free(data);
# 116| }
# 117|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 113| sss_string_array_free(data->credential_id_list);
# 114|
# 115|-> free(data);
# 116| }
# 117|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_init'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 146| }
# 147|
# 148|-> data->credential_id_list = sss_string_array_copy(credential_id_list);
# 149| if (data->credential_id_list == NULL) {
# 150| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of 'data'
# 146| }
# 147|
# 148|-> data->credential_id_list = sss_string_array_copy(credential_id_list);
# 149| if (data->credential_id_list == NULL) {
# 150| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 146| }
# 147|
# 148|-> data->credential_id_list = sss_string_array_copy(credential_id_list);
# 149| if (data->credential_id_list == NULL) {
# 150| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_init’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:148:32: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
# 146| }
# 147|
# 148|-> data->credential_id_list = sss_string_array_copy(credential_id_list);
# 149| if (data->credential_id_list == NULL) {
# 150| ret = ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_from_json_object'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:198:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
# 196| jdata.cryptographic_challenge);
# 197|
# 198|-> sss_string_array_free(credential_id_list);
# 199| return data;
# 200| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_from_json_object’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:198:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 196| jdata.cryptographic_challenge);
# 197|
# 198|-> sss_string_array_free(credential_id_list);
# 199| return data;
# 200| }
Error: GCC_ANALYZER_WARNING (CWE-416):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_reply_free.part.0'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
# 241| }
# 242|
# 243|-> free(data->credential_id);
# 244| free(data->cryptographic_challenge);
# 245| free(data->authenticator_data);
Error: GCC_ANALYZER_WARNING (CWE-416):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
# 241| }
# 242|
# 243|-> free(data->credential_id);
# 244| free(data->cryptographic_challenge);
# 245| free(data->authenticator_data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_free.part.0'
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:320:12: warning[-Wanalyzer-malloc-leak]: leak of 'sss_passkey_reply_from_json_object(json_loads(json_str, 0, & jret))'
# 318| }
# 319|
# 320|-> return sss_passkey_reply_init(jdata.credential_id,
# 321| jdata.cryptographic_challenge,
# 322| jdata.authenticator_data,
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c:320:12: warning[-Wanalyzer-malloc-leak]: leak of ‘sss_passkey_reply_from_json_object(json_loads(json_str, 0, & jret))’
sssd-2.13.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
# 318| }
# 319|
# 320|-> return sss_passkey_reply_init(jdata.credential_id,
# 321| jdata.cryptographic_challenge,
# 322| jdata.authenticator_data,
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c: scope_hint: In function 'sss_userok'
sssd-2.13.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c:69:18: warning[-Wanalyzer-malloc-leak]: leak of 'buffer'
# 67| }
# 68|
# 69|-> nss_status = _nss_sss_getpwnam_r(princ_str, &pwd, buffer, buflen,
# 70| &nss_errno);
# 71| if (nss_status != NSS_STATUS_SUCCESS) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c: scope_hint: In function 'sss_an2ln'
sssd-2.13.0/src/krb5_plugin/sssd_krb5_localauth_plugin.c:137:18: warning[-Wanalyzer-malloc-leak]: leak of 'buffer'
# 135| }
# 136|
# 137|-> nss_status = _nss_sss_getpwnam_r(princ_str, &pwd, buffer, buflen,
# 138| &nss_errno);
# 139| if (nss_status != NSS_STATUS_SUCCESS) {
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/lib/certmap/sss_certmap.c: scope_hint: In function 'get_type_prefix'
sssd-2.13.0/src/lib/certmap/sss_certmap.c:106:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 104| *rule_start = match_rule;
# 105|
# 106|-> delim = strchr(match_rule, ':');
# 107| if (delim == NULL) {
# 108| /* no type prefix found */
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/lib/certmap/sss_certmap.c: scope_hint: In function 'expand_sid'
sssd-2.13.0/src/lib/certmap/sss_certmap.c:586:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 584| exp = talloc_strdup(ctx, sid);
# 585| } else if (strcasecmp(attr_name, "rid") == 0) {
# 586|-> sep = strrchr(sid, '-');
# 587| if (sep == NULL || sep[1] == '\0') {
# 588| CM_DEBUG(ctx, "Unsupported SID string [%s].", sid);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/lib/cifs_idmap_sss/cifs_idmap_sss.c: scope_hint: In function 'cifs_idmap_init_plugin'
sssd-2.13.0/src/lib/cifs_idmap_sss/cifs_idmap_sss.c:74:11: warning[-Wanalyzer-malloc-leak]: leak of 'ctx'
# 72| ctx_set_error(ctx, NULL);
# 73|
# 74|-> err = sss_idmap_init(NULL, NULL, NULL, &ctx->idmap);
# 75| if (err != IDMAP_SUCCESS) {
# 76| ctx_set_error(ctx, idmap_error_string(err));
Error: GCC_ANALYZER_WARNING (CWE-465):
sssd-2.13.0/src/lib/idmap/sss_idmap.c: scope_hint: In function 'sss_idmap_gen_to_unix'
sssd-2.13.0/src/lib/idmap/sss_idmap.c:1322:30: warning[-Wanalyzer-deref-before-check]: check of 'idmap_domain_info' for NULL after already dereferencing it
sssd-2.13.0/src/lib/idmap/sss_idmap.c:33: included_from: Included from here.
sssd-2.13.0/src/lib/idmap/sss_idmap.c:1310:5: note: in expansion of macro 'CHECK_IDMAP_CTX'
sssd-2.13.0/src/lib/idmap/sss_idmap.c:1310:5: note: in expansion of macro 'CHECK_IDMAP_CTX'
# 1320|
# 1321| /* Try primary slices */
# 1322|-> while (idmap_domain_info != NULL) {
# 1323| if (is_from_dom(idmap_domain_info->sid, domain_id)) {
# 1324| if (idmap_domain_info->external_mapping == true) {
Error: COMPILER_WARNING (CWE-457):
sssd-2.13.0/src/p11_child/p11_child_openssl.c: scope_hint: In function ‘do_card’
sssd-2.13.0/src/p11_child/p11_child_openssl.c:2227:15: warning[-Wmaybe-uninitialized]: ‘module_id’ may be used uninitialized
# 2227 | ret = do_slot(module, module_id, slot_id, &info, &token_info, &module_info,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2228 | mem_ctx, p11_ctx, mode, pin, module_name_in, token_name_in,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2229 | key_id_in, label_in, uri_str, _multi);
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
sssd-2.13.0/src/p11_child/p11_child_openssl.c:1995:12: note: ‘module_id’ was declared here
# 1995 | size_t module_id;
# | ^~~~~~~~~
# 2225| }
# 2226|
# 2227|-> ret = do_slot(module, module_id, slot_id, &info, &token_info, &module_info,
# 2228| mem_ctx, p11_ctx, mode, pin, module_name_in, token_name_in,
# 2229| key_id_in, label_in, uri_str, _multi);
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ad/ad_access.c: scope_hint: In function 'parse_sub_filter'
sssd-2.13.0/src/providers/ad/ad_access.c:73:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 71| char *specdelim;
# 72|
# 73|-> specdelim = strchr(full_filter, ':');
# 74| if (specdelim == NULL) return EINVAL;
# 75|
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ad/ad_access.c: scope_hint: In function 'parse_filter'
sssd-2.13.0/src/providers/ad/ad_access.c:112:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 110| if (filter == NULL || spec == NULL || flags == NULL) return EINVAL;
# 111|
# 112|-> kwdelim = strchr(full_filter, ':');
# 113| if (kwdelim != NULL) {
# 114| specdelim = strchr(kwdelim+1, ':');
Error: GCC_ANALYZER_WARNING (CWE-476):
sssd-2.13.0/src/providers/ad/ad_subdomains.c: scope_hint: In function 'ad_get_slave_domain_send'
sssd-2.13.0/src/providers/ad/ad_subdomains.c:1135:30: warning[-Wanalyzer-null-dereference]: dereference of NULL 'root_id_ctx'
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/providers/data_provider.h:40: included_from: Included from here.
sssd-2.13.0/src/providers/backend.h:25: included_from: Included from here.
sssd-2.13.0/src/providers/ldap/sdap_async.h:29: included_from: Included from here.
sssd-2.13.0/src/providers/ad/ad_subdomains.c:25: included_from: Included from here.
sssd-2.13.0/src/providers/ad/ad_subdomains.c:2277:9: note: in expansion of macro 'DEBUG'
# 1133| state->sd_ctx = sd_ctx;
# 1134| state->be_ctx = sd_ctx->be_ctx;
# 1135|-> state->opts = root_id_ctx->sdap_id_ctx->opts;
# 1136| state->idmap_ctx = root_id_ctx->sdap_id_ctx->opts->idmap_ctx;
# 1137| state->root_attrs = root_attrs;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_access.c: scope_hint: In function 'hbac_debug_messages'
sssd-2.13.0/src/providers/ipa/ipa_access.c:68:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 66|
# 67| va_start(ap, fmt);
# 68|-> sss_vdebug_fn(file, line, function, loglevel, 0, fmt, ap);
# 69| va_end(ap);
# 70| }
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_dn.c: scope_hint: In function 'check_dn'
sssd-2.13.0/src/providers/ipa/ipa_dn.c:40:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 38|
# 39| /* check RDN attribute */
# 40|-> ldbattr = ldb_dn_get_rdn_name(dn);
# 41| if (ldbattr == NULL || strcasecmp(ldbattr, rdn_attr) != 0) {
# 42| return false;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_dn.c:50:16: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 48|
# 49| comp = 1;
# 50|-> num_comp = ldb_dn_get_comp_num(dn);
# 51|
# 52| va_copy(ap, in_ap);
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_dn.c:63:19: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 61| }
# 62|
# 63|-> ldbattr = ldb_dn_get_component_name(dn, comp);
# 64| if (ldbattr == NULL || strcasecmp(ldbattr, attr) != 0) {
# 65| goto vafail;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_dn.c:68:18: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 66| }
# 67|
# 68|-> ldbval = ldb_dn_get_component_val(dn, comp);
# 69| if (ldbval == NULL) {
# 70| goto vafail;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/ipa_dn.c:82:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 80| va_end(ap);
# 81|
# 82|-> ldbattr = ldb_dn_get_component_name(dn, comp);
# 83| if (ldbattr == NULL || strcmp(ldbattr, "dc") != 0) {
# 84| return false;
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c: scope_hint: In function 'ipa_getkeytab_exec'
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c:854:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
# 852| }
# 853|
# 854|-> gkt_env[0] = talloc_asprintf(NULL, "KRB5CCNAME=%s", ccache);
# 855| if (gkt_env[0] == NULL) {
# 856| DEBUG(SSSDBG_FATAL_FAILURE, "Failed to format KRB5CCNAME\n");
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c:864:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.13.0/src/util/child_common.h:28: included_from: Included from here.
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c:865:9: note: in expansion of macro 'DEBUG'
# 862| ret = unlink(keytab_path);
# 863| if (ret == -1) {
# 864|-> ret = errno;
# 865| DEBUG(SSSDBG_FATAL_FAILURE,
# 866| "Failed to unlink the temporary ccname [%d][%s]\n",
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c:880:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.13.0/src/providers/ipa/ipa_subdomains_server.c:881:5: note: in expansion of macro 'DEBUG'
# 878|
# 879| /* The child should never end up here */
# 880|-> ret = errno;
# 881| DEBUG(SSSDBG_FATAL_FAILURE,
# 882| "execle failed [%d][%s].\n", ret, sss_strerror(ret));
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/ipa/selinux_child.c: scope_hint: In function ‘main’
sssd-2.13.0/src/providers/ipa/selinux_child.c:330:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
# 330 | setresuid(suid, suid, suid);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
# 328|
# 329| if (getresuid(&ruid, &euid, &suid) == 0) {
# 330|-> setresuid(suid, suid, suid);
# 331| }
# 332| if (getresgid(&rgid, &egid, &sgid) == 0) {
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/ipa/selinux_child.c:333:9: warning[-Wunused-result]: ignoring return value of ‘setresgid’ declared with attribute ‘warn_unused_result’
# 333 | setresgid(sgid, sgid, sgid);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
# 331| }
# 332| if (getresgid(&rgid, &egid, &sgid) == 0) {
# 333|-> setresgid(sgid, sgid, sgid);
# 334| }
# 335|
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ipa/selinux_child_semanage.c: scope_hint: In function ‘sss_semanage_error_callback’
sssd-2.13.0/src/providers/ipa/selinux_child_semanage.c:54:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
# 52|
# 53| va_start(ap, fmt);
# 54|-> sss_vdebug_fn(__FILE__, __LINE__, "libsemanage", level,
# 55| APPEND_LINE_FEED, fmt, ap);
# 56| va_end(ap);
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function 'switch_to_user'
sssd-2.13.0/src/providers/krb5/krb5_ccache.c:68:9: warning[-Wunused-result]: ignoring return value of 'setresuid' declared with attribute 'warn_unused_result'
# 68 | setresuid(-1, suid, -1);
# | ^~~~~~~~~~~~~~~~~~~~~~~
# 66| ret = setresgid(-1, rgid, -1);
# 67| if (ret != 0) {
# 68|-> setresuid(-1, suid, -1);
# 69| return errno;
# 70| }
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function ‘switch_to_user’
sssd-2.13.0/src/providers/krb5/krb5_ccache.c:68:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
# 68 | setresuid(-1, suid, -1);
# | ^~~~~~~~~~~~~~~~~~~~~~~
# 66| ret = setresgid(-1, rgid, -1);
# 67| if (ret != 0) {
# 68|-> setresuid(-1, suid, -1);
# 69| return errno;
# 70| }
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function 'switch_to_service'
sssd-2.13.0/src/providers/krb5/krb5_ccache.c:98:9: warning[-Wunused-result]: ignoring return value of 'setresuid' declared with attribute 'warn_unused_result'
# 98 | setresuid(-1, ruid, -1);
# | ^~~~~~~~~~~~~~~~~~~~~~~
# 96| ret = setresgid(-1, sgid, -1);
# 97| if (ret != 0) {
# 98|-> setresuid(-1, ruid, -1);
# 99| return errno;
# 100| }
Error: COMPILER_WARNING (CWE-252):
sssd-2.13.0/src/providers/krb5/krb5_ccache.c: scope_hint: In function ‘switch_to_service’
sssd-2.13.0/src/providers/krb5/krb5_ccache.c:98:9: warning[-Wunused-result]: ignoring return value of ‘setresuid’ declared with attribute ‘warn_unused_result’
# 98 | setresuid(-1, ruid, -1);
# | ^~~~~~~~~~~~~~~~~~~~~~~
# 96| ret = setresgid(-1, sgid, -1);
# 97| if (ret != 0) {
# 98|-> setresuid(-1, ruid, -1);
# 99| return errno;
# 100| }
Error: GCC_ANALYZER_WARNING (CWE-465):
sssd-2.13.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘answer_otp’
sssd-2.13.0/src/providers/krb5/krb5_child.c:703:35: warning[-Wanalyzer-deref-before-check]: check of ‘**chl.tokeninfo’ for NULL after already dereferencing it
sssd-2.13.0/src/util/child_bootstrap.h:27: included_from: Included from here.
sssd-2.13.0/src/providers/krb5/krb5_child.c:36: included_from: Included from here.
sssd-2.13.0/src/providers/krb5/krb5_child.c:681:9: note: in expansion of macro ‘DEBUG’
# 701|
# 702| /* Find the first supported tokeninfo which matches our authtoken. */
# 703|-> for (i = 0; chl->tokeninfo[i] != NULL; i++) {
# 704| ret = tokeninfo_matches(kr, chl->tokeninfo[i], kr->pd->authtok,
# 705| &token, &pin);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘create_empty_cred’
sssd-2.13.0/src/providers/krb5/krb5_child.c:1589:12: warning[-Wanalyzer-malloc-leak]: leak of ‘cred’
# 1587| }
# 1588|
# 1589|-> kerr = krb5_copy_principal(ctx, princ, &cred->client);
# 1590| if (kerr != 0) {
# 1591| DEBUG(SSSDBG_CRIT_FAILURE, "krb5_copy_principal failed.\n");
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/providers/krb5/krb5_child.c: scope_hint: In function ‘try_open_krb5_conf’
sssd-2.13.0/src/providers/krb5/krb5_child.c:4271:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/etc/krb5.conf", 0)’
# 4269| fd = open("/etc/krb5.conf", O_RDONLY);
# 4270| if (fd != -1) {
# 4271|-> close(fd);
# 4272| } else {
# 4273| ret = errno;
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ldap/sdap.c: scope_hint: In function 'split_extra_attr'
sssd-2.13.0/src/providers/ldap/sdap.c:101:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 99| char *sep;
# 100|
# 101|-> sep = strchr(conf_attr, ':');
# 102| if (sep == NULL) {
# 103| sysdb_attr = talloc_strdup(mem_ctx, conf_attr);
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ldap/sdap_async_groups.c: scope_hint: In function 'are_sids_from_same_dom'
sssd-2.13.0/src/providers/ldap/sdap_async_groups.c:746:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 744| bool result;
# 745|
# 746|-> rid1 = strrchr(sid1, '-');
# 747| if (rid1 == NULL) {
# 748| return EINVAL;
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ldap/sdap_async_groups.c:751:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 749| }
# 750|
# 751|-> rid2 = strrchr(sid2, '-');
# 752| if (rid2 == NULL) {
# 753| return EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
sssd-2.13.0/src/providers/ldap/sdap_async_initgroups.c: scope_hint: In function 'sdap_add_incomplete_groups'
sssd-2.13.0/src/providers/ldap/sdap_async_initgroups.c:71:31: warning[-Wanalyzer-null-dereference]: dereference of NULL 'sysdb_groupnames'
sssd-2.13.0/src/util/util.h:45: included_from: Included from here.
sssd-2.13.0/src/providers/ldap/sdap_async_initgroups.c:24: included_from: Included from here.
# 69| mi = 0;
# 70|
# 71|-> for (i=0; sysdb_groupnames[i]; i++) {
# 72| subdomain = find_domain_by_object_name(domain, sysdb_groupnames[i]);
# 73| if (subdomain == NULL) {
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/ldap/sdap_certmap.c: scope_hint: In function 'ext_debug'
sssd-2.13.0/src/providers/ldap/sdap_certmap.c:48:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 46|
# 47| va_start(ap, format);
# 48|-> sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
# 49| format, ap);
# 50| va_end(ap);
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/providers/ldap/sdap_range.c: scope_hint: In function 'sdap_parse_range'
sssd-2.13.0/src/providers/ldap/sdap_range.c:48:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 46|
# 47| /* The base_attr is the portion before the semicolon (if it exists) */
# 48|-> endptr = strchr(attr_desc, ';');
# 49| if (endptr == NULL) {
# 50| /* Not a ranged attribute. Just copy the attribute desc */
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/providers/proxy/proxy_certmap.c: scope_hint: In function 'ext_debug'
sssd-2.13.0/src/providers/proxy/proxy_certmap.c:43:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 41|
# 42| va_start(ap, format);
# 43|-> sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED, format, ap);
# 44| va_end(ap);
# 45| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/proxy/proxy_child.c:87:23: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 85| reply[i].resp_retcode = 0;
# 86|
# 87|-> ret = sss_authtok_get_password(auth_data->authtok,
# 88| &password, &pwlen);
# 89| if (ret) goto failed;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/proxy/proxy_child.c:87:23: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
# 85| reply[i].resp_retcode = 0;
# 86|
# 87|-> ret = sss_authtok_get_password(auth_data->authtok,
# 88| &password, &pwlen);
# 89| if (ret) goto failed;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/proxy/proxy_child.c:109:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 107|
# 108| failed:
# 109|-> free(reply);
# 110| return PAM_CONV_ERR;
# 111| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/proxy/proxy_child.c:140:27: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
# 138| if (!auth_data->sent_old) {
# 139| /* The first prompt will be asking for the old authtok */
# 140|-> ret = sss_authtok_get_password(auth_data->authtok,
# 141| &password, &pwlen);
# 142| if (ret) goto failed;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/providers/proxy/proxy_child.c:150:27: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
# 148| else {
# 149| /* Subsequent prompts are looking for the new authtok */
# 150|-> ret = sss_authtok_get_password(auth_data->newauthtok,
# 151| &password, &pwlen);
# 152| if (ret) goto failed;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/python/pysss.c: scope_hint: In function 'py_sss_getgrouplist'
sssd-2.13.0/src/python/pysss.c:252:15: warning[-Wanalyzer-malloc-leak]: leak of 'groups'
# 250|
# 251| do {
# 252|-> ret = getgrouplist(username, pw->pw_gid, groups, &ngroups);
# 253| if (ret < ngroups) {
# 254| gid_t *tmp_groups = realloc(groups, ngroups * sizeof(gid_t));
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/responder/common/responder_common.c: scope_hint: In function ‘get_client_cred’
sssd-2.13.0/src/responder/common/responder_common.c:132:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&proc_path, 0)’
sssd-2.13.0/src/util/util_creds.h:24: included_from: Included from here.
sssd-2.13.0/src/responder/common/responder_common.c:43: included_from: Included from here.
sssd-2.13.0/src/shared/cred.h:35:23: note: in definition of macro ‘CRED_PID’
sssd-2.13.0/src/responder/common/responder_common.c:126:9: note: in expansion of macro ‘cli_creds_get_pid’
# 130| proc_fd = open(proc_path, O_RDONLY);
# 131| if (proc_fd != -1) {
# 132|-> if (sss_fd_nonblocking(proc_fd) == EOK) {
# 133| ret = read(proc_fd, cmd_line, sizeof(cmd_line)-1);
# 134| if (ret > 0) {
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/responder/common/responder_common.c: scope_hint: In function ‘create_pipe_fd’
sssd-2.13.0/src/responder/common/responder_common.c:708:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
# 706| orig_umaskval = umask(umaskval);
# 707|
# 708|-> ret = sss_fd_nonblocking(fd);
# 709| if (ret != EOK) {
# 710| goto done;
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/responder/common/responder_common.c:756:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
# 754| *_fd = fd;
# 755| } else {
# 756|-> close(fd);
# 757| }
# 758| return ret;
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c: scope_hint: In function ‘sss_mc_destroy_file’
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:1242:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(filename, 2)’
# 1240| ofd = open(filename, O_RDWR);
# 1241| if (ofd != -1) {
# 1242|-> ret = sss_br_lock_file(ofd, 0, 1, retries, t);
# 1243| if (ret != EOK) {
# 1244| DEBUG(SSSDBG_FATAL_FAILURE, "Failed to lock file %s.\n", filename);
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘ext_debug’
sssd-2.13.0/src/responder/pam/pamsrv_p11.c:137:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
# 135|
# 136| va_start(ap, format);
# 137|-> sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
# 138| format, ap);
# 139| va_end(ap);
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/responder/ssh/ssh_cmd.c: scope_hint: In function ‘ssh_ext_debug’
sssd-2.13.0/src/responder/ssh/ssh_cmd.c:131:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
# 129|
# 130| va_start(ap, format);
# 131|-> sss_vdebug_fn(file, line, function, level, APPEND_LINE_FEED,
# 132| format, ap);
# 133| va_end(ap);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sbus/interface/sbus_introspection.c: scope_hint: In function 'sbus_introspect'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:395:5: warning[-Wanalyzer-malloc-leak]: leak of 'memstream'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:378:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:378:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:379:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:393:5: note: in expansion of macro 'WRITE_OR_FAIL'
sssd-2.13.0/src/sbus/interface/sbus_introspection.c:393:5: note: in expansion of macro 'WRITE_OR_FAIL'
# 393| WRITE_OR_FAIL(memstream, ret, done, FMT_NODE_CLOSE);
# 394|
# 395|-> fflush(memstream);
# 396| introspection = talloc_memdup(mem_ctx, buffer, size + 1);
# 397|
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/request/sbus_message.c:105:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 103| * freed through dbus api. */
# 104|
# 105|-> bret = dbus_message_allocate_data_slot(&global_data_slot);
# 106| if (!bret) {
# 107| DEBUG(SSSDBG_CRIT_FAILURE, "Unable to allocate data slot!\n");
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/request/sbus_message.c:113:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 111|
# 112| free_fn = sbus_msg_data_destructor;
# 113|-> bret = dbus_message_set_data(msg, global_data_slot, talloc_msg, free_fn);
# 114| if (!bret) {
# 115| DEBUG(SSSDBG_CRIT_FAILURE, "Unable to set message data!\n");
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_method_create_empty'
sssd-2.13.0/src/sbus/request/sbus_message.c:180:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 178| errno_t ret;
# 179|
# 180|-> msg = dbus_message_new_method_call(bus, path, iface, method);
# 181| if (msg == NULL) {
# 182| DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create message\n");
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_signal_create_empty'
sssd-2.13.0/src/sbus/request/sbus_message.c:255:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 253| errno_t ret;
# 254|
# 255|-> msg = dbus_message_new_signal(path, iface, signame);
# 256| if (msg == NULL) {
# 257| DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create message\n");
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/sbus_opath.c: scope_hint: In function 'sbus_opath_escape'
sssd-2.13.0/src/sbus/sbus_opath.c:213:17: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/sbus/sbus_opath.c:21: included_from: Included from here.
# 211| }
# 212|
# 213|-> safe_path = talloc_strdup(tmp_ctx, "");
# 214| if (safe_path == NULL) {
# 215| goto done;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/sbus_opath.c:221:21: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 219| if (strcmp(component, "") == 0) {
# 220| /* the for loop would just fall through */
# 221|-> safe_path = talloc_asprintf_append_buffer(safe_path, "_");
# 222| if (safe_path == NULL) {
# 223| goto done;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/sbus_opath.c:237:25: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 235| || (c >= 'a' && c <= 'z')
# 236| || (c >= '0' && c <= '9')) {
# 237|-> safe_path = talloc_asprintf_append_buffer(safe_path, "%c", c);
# 238| if (safe_path == NULL) {
# 239| goto done;
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sbus/sbus_opath.c:242:25: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 240| }
# 241| } else {
# 242|-> safe_path = talloc_asprintf_append_buffer(safe_path, "_%02x", c);
# 243| if (safe_path == NULL) {
# 244| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.13.0/src/util/util.h:53: included_from: Included from here.
sssd-2.13.0/src/sss_client/autofs/sss_autofs_private.h:22: included_from: Included from here.
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:25: included_from: Included from here.
sssd-2.13.0/src/shared/safealign.h:82:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.13.0/src/shared/safealign.h:145:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT32'
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:445:5: note: in expansion of macro 'SAFEALIGN_SET_UINT32'
# 92| enum sss_status status;
# 93|
# 94|-> status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
# 95| repbuf, replen, errnop,
# 96| SSS_AUTOFS_SOCKET_NAME, false, false);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c: scope_hint: In function 'sss_autofs_make_request'
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of 'name'
# 92| enum sss_status status;
# 93|
# 94|-> status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
# 95| repbuf, replen, errnop,
# 96| SSS_AUTOFS_SOCKET_NAME, false, false);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
sssd-2.13.0/src/util/util.h:53: included_from: Included from here.
sssd-2.13.0/src/sss_client/autofs/sss_autofs_private.h:22: included_from: Included from here.
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:25: included_from: Included from here.
sssd-2.13.0/src/shared/safealign.h:82:5: note: in expansion of macro ‘SAFEALIGN_SETMEM_VALUE’
sssd-2.13.0/src/shared/safealign.h:145:30: note: in expansion of macro ‘SAFEALIGN_SETMEM_UINT32’
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:445:5: note: in expansion of macro ‘SAFEALIGN_SET_UINT32’
# 92| enum sss_status status;
# 93|
# 94|-> status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
# 95| repbuf, replen, errnop,
# 96| SSS_AUTOFS_SOCKET_NAME, false, false);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c: scope_hint: In function ‘sss_autofs_make_request’
sssd-2.13.0/src/sss_client/autofs/sss_autofs.c:94:14: warning[-Wanalyzer-malloc-leak]: leak of ‘name’
# 92| enum sss_status status;
# 93|
# 94|-> status = sss_cli_make_request_with_checks(cmd, rd, SSS_CLI_SOCKET_TIMEOUT,
# 95| repbuf, replen, errnop,
# 96| SSS_AUTOFS_SOCKET_NAME, false, false);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function 'sss_cli_close_socket'
sssd-2.13.0/src/sss_client/common.c:89:9: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
sssd-2.13.0/src/sss_client/common.c:34: included_from: Included from here.
# 87|
# 88| if (sd != -1) {
# 89|-> close(sd);
# 90| sss_cli_sd_set(-1);
# 91| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function ‘sss_cli_close_socket’
sssd-2.13.0/src/sss_client/common.c:89:9: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
sssd-2.13.0/src/sss_client/common.c:34: included_from: Included from here.
# 87|
# 88| if (sd != -1) {
# 89|-> close(sd);
# 90| sss_cli_sd_set(-1);
# 91| }
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function 'make_nonstd_fd_internals'
sssd-2.13.0/src/sss_client/common.c:535:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sd'
# 533| if (fd >= 0 && fd <= 2) {
# 534| #ifdef F_DUPFD
# 535|-> if ((new_fd = fcntl(fd, F_DUPFD, 3)) == -1) {
# 536| return -1;
# 537| }
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function ‘make_nonstd_fd_internals’
sssd-2.13.0/src/sss_client/common.c:535:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sd’
# 533| if (fd >= 0 && fd <= 2) {
# 534| #ifdef F_DUPFD
# 535|-> if ((new_fd = fcntl(fd, F_DUPFD, 3)) == -1) {
# 536| return -1;
# 537| }
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function 'make_safe_fd'
sssd-2.13.0/src/sss_client/common.c:591:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sd'
# 589| #endif
# 590|
# 591|-> if ((flags = fcntl(new_fd, F_GETFL)) == -1) {
# 592| close(new_fd);
# 593| return -1;
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function ‘make_safe_fd’
sssd-2.13.0/src/sss_client/common.c:591:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sd’
# 589| #endif
# 590|
# 591|-> if ((flags = fcntl(new_fd, F_GETFL)) == -1) {
# 592| close(new_fd);
# 593| return -1;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function 'sss_cli_check_socket.part.0'
sssd-2.13.0/src/sss_client/common.c:767:16: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
# 765| if (sss_cli_sb == NULL) {
# 766| *errnop = EFAULT;
# 767|-> return SSS_STATUS_UNAVAIL;
# 768| }
# 769|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c: scope_hint: In function ‘sss_cli_check_socket.part.0’
sssd-2.13.0/src/sss_client/common.c:767:16: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
# 765| if (sss_cli_sb == NULL) {
# 766| *errnop = EFAULT;
# 767|-> return SSS_STATUS_UNAVAIL;
# 768| }
# 769|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c:807:19: warning[-Wanalyzer-malloc-leak]: leak of 'descriptor'
# 805| do {
# 806| errno = 0;
# 807|-> res = poll(&pfd, 1, timeout);
# 808| error = errno;
# 809|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/common.c:807:19: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
# 805| do {
# 806| errno = 0;
# 807|-> res = poll(&pfd, 1, timeout);
# 808| error = errno;
# 809|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
# 403|
# 404| done:
# 405|-> sss_nss_unlock();
# 406| free(repbuf);
# 407| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.d.names'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
# 403|
# 404| done:
# 405|-> sss_nss_unlock();
# 406| free(repbuf);
# 407| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.d.str'
sssd-2.13.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:29: included_from: Included from here.
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
# 403|
# 404| done:
# 405|-> sss_nss_unlock();
# 406| free(repbuf);
# 407| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:405:5: warning[-Wanalyzer-malloc-leak]: leak of 'out.types'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:318:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c:334:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/sss_client/idmap/sss_nss_idmap.c: scope_hint: In function 'sss_nss_getyyybyxxx'
# 403|
# 404| done:
# 405|-> sss_nss_unlock();
# 406| free(repbuf);
# 407| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_uid_from_mc'
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c:98:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
# 96| }
# 97| buf = p;
# 98|-> rc = sss_nss_mc_getpwnam(name, len, &pwd, buf, buflen);
# 99| } while (rc == ERANGE);
# 100|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_gid_from_mc'
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c:139:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
# 137| }
# 138| buf = p;
# 139|-> rc = sss_nss_mc_getgrnam(name, len, &grp, buf, buflen);
# 140| } while (rc == ERANGE);
# 141|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_user_from_mc'
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c:174:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
# 172| }
# 173| buf = p;
# 174|-> rc = sss_nss_mc_getpwuid(uid, &pwd, buf, buflen);
# 175| } while (rc == ERANGE);
# 176|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c: scope_hint: In function 'get_group_from_mc'
sssd-2.13.0/src/sss_client/nfs/sss_nfs_client.c:215:14: warning[-Wanalyzer-malloc-leak]: leak of 'p'
# 213| }
# 214| buf = p;
# 215|-> rc = sss_nss_mc_getgrgid(gid, &grp, buf, buflen);
# 216| } while (rc == ERANGE);
# 217|
Error: GCC_ANALYZER_WARNING (CWE-688):
sssd-2.13.0/src/sss_client/nss_mc_common.c: scope_hint: In function 'sss_nss_mc_get_record'
sssd-2.13.0/src/sss_client/nss_mc_common.c:50:9: warning[-Wanalyzer-null-argument]: use of NULL 'copy_rec' where non-null expected
sssd-2.13.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.13.0/src/sss_client/nss_mc.h:35: included_from: Included from here.
sssd-2.13.0/src/sss_client/nss_mc_common.c:33: included_from: Included from here.
sssd-2.13.0/src/util/mmap_cache.h:65:43: note: in definition of macro 'MC_SLOT_TO_PTR'
sssd-2.13.0/src/sss_client/nss_mc_common.c:328:14: note: in expansion of macro 'MC_CHECK_RECORD_LENGTH'
sssd-2.13.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.13.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.13.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.13.0/src/sss_client/nss_mc_common.c:345:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.13.0/src/sss_client/nss_mc_common.c:31: included_from: Included from here.
/usr/include/string.h:47:14: note: argument 1 of 'memcpy' must be non-null
# 48| if (MC_VALID_BARRIER(_b1)) { \
# 49| __sync_synchronize(); \
# 50|-> memcpy(dest, src, len); \
# 51| __sync_synchronize(); \
# 52| if ((src)->b2 == _b1) { \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nss_netgroup.c: scope_hint: In function '_nss_sss_setnetgrent'
sssd-2.13.0/src/sss_client/nss_netgroup.c:194:12: warning[-Wanalyzer-malloc-leak]: leak of 'name'
# 192| rd.len = name_len + 1;
# 193|
# 194|-> nret = sss_nss_make_request(SSS_NSS_SETNETGRENT, &rd,
# 195| &repbuf, &replen, &errnop);
# 196| free(name);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nss_services.c: scope_hint: In function '_nss_sss_getservbyport_r'
sssd-2.13.0/src/sss_client/nss_services.c:334:5: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.13.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.13.0/src/sss_client/nss_services.c:34: included_from: Included from here.
sssd-2.13.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.13.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.13.0/src/sss_client/nss_services.c:320:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
# 332| rd.data = data;
# 333|
# 334|-> sss_nss_lock();
# 335|
# 336| nret = sss_nss_make_request(SSS_NSS_GETSERVBYPORT, &rd,
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/nss_services.c:336:12: warning[-Wanalyzer-malloc-leak]: leak of 'data'
sssd-2.13.0/src/shared/safealign.h:98:5: note: in expansion of macro 'SAFEALIGN_SETMEM_VALUE'
sssd-2.13.0/src/shared/safealign.h:147:30: note: in expansion of macro 'SAFEALIGN_SETMEM_UINT16'
sssd-2.13.0/src/sss_client/nss_services.c:320:5: note: in expansion of macro 'SAFEALIGN_SET_UINT16'
# 334| sss_nss_lock();
# 335|
# 336|-> nret = sss_nss_make_request(SSS_NSS_GETSERVBYPORT, &rd,
# 337| &repbuf, &replen, errnop);
# 338| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:108:5: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 106| #endif
# 107|
# 108|-> pam_vsyslog(pamh, LOG_AUTHPRIV|level, fmt, ap);
# 109|
# 110| va_end(ap);
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'logger'
sssd-2.13.0/src/sss_client/pam_sss.c:108:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/sss_client/pam_sss.c:30: included_from: Included from here.
# 106| #endif
# 107|
# 108|-> pam_vsyslog(pamh, LOG_AUTHPRIV|level, fmt, ap);
# 109|
# 110| va_end(ap);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:293:13: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 291| mesg[0] = (const struct pam_message *) pam_msg;
# 292|
# 293|-> ret=conv->conv(1, mesg, &resp,
# 294| conv->appdata_ptr);
# 295| free(pam_msg);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'do_pam_conversation'
sssd-2.13.0/src/sss_client/pam_sss.c:293:13: warning[-Wanalyzer-malloc-leak]: leak of 'pam_msg'
sssd-2.13.0/src/sss_client/pam_sss.c:58: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss.c:2899:45: note: in expansion of macro '_'
# 291| mesg[0] = (const struct pam_message *) pam_msg;
# 292|
# 293|-> ret=conv->conv(1, mesg, &resp,
# 294| conv->appdata_ptr);
# 295| free(pam_msg);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:312:21: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 310| if (null_strcmp(answer, resp[0].resp) != 0) {
# 311| logger(pamh, LOG_NOTICE, "Passwords do not match.");
# 312|-> sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
# 313| free(resp[0].resp);
# 314| if (answer != NULL) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:315:25: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 313| free(resp[0].resp);
# 314| if (answer != NULL) {
# 315|-> sss_erase_mem_securely((void *) answer, strlen(answer));
# 316| free(answer);
# 317| answer = NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:330:17: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 328| goto failed;
# 329| }
# 330|-> sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
# 331| free(resp[0].resp);
# 332| } else {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:338:21: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
sssd-2.13.0/src/sss_client/pam_sss.c:2899:45: note: in expansion of macro '_'
# 336| } else {
# 337| answer = strndup(resp[0].resp, MAX_AUTHTOK_SIZE);
# 338|-> sss_erase_mem_securely((void *)resp[0].resp, strlen(resp[0].resp));
# 339| free(resp[0].resp);
# 340| if(answer == NULL) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'prompt_password'
sssd-2.13.0/src/sss_client/pam_sss.c:1669:9: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
sssd-2.13.0/src/sss_client/pam_sss.c:2899:45: note: in expansion of macro '_'
# 1667| } else {
# 1668| pi->pam_authtok = strdup(answer);
# 1669|-> sss_erase_mem_securely((void *)answer, strlen(answer));
# 1670| free(answer);
# 1671| answer=NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'prompt_2fa_single'
sssd-2.13.0/src/sss_client/pam_sss.c:1841:9: warning[-Wanalyzer-malloc-leak]: leak of 'answer'
# 1839| } else {
# 1840| pi->pam_authtok = strdup(answer);
# 1841|-> sss_erase_mem_securely((void *)answer, strlen(answer));
# 1842| free(answer);
# 1843| answer=NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'keep_authtok_data'
sssd-2.13.0/src/sss_client/pam_sss.c:2813:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_type'
# 2811| *authtok_type = pi->pam_authtok_type;
# 2812|
# 2813|-> pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_TYPE, authtok_type,
# 2814| free_exp_data);
# 2815| if (pam_status != PAM_SUCCESS) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:2828:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_size'
# 2826| *authtok_size = pi->pam_authtok_size;
# 2827|
# 2828|-> pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_SIZE, authtok_size,
# 2829| free_exp_data);
# 2830| if (pam_status != PAM_SUCCESS) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:2843:18: warning[-Wanalyzer-malloc-leak]: leak of 'authtok_data'
# 2841| memcpy(authtok_data, pi->pam_authtok, pi->pam_authtok_size);
# 2842|
# 2843|-> pam_status = pam_set_data(pamh, PAM_SSS_AUTHOK_DATA, authtok_data,
# 2844| free_exp_data);
# 2845| if (pam_status != PAM_SUCCESS) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'pam_sm_authenticate'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:50:9: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
/usr/include/shadow.h:32: included_from: Included from here.
/usr/include/security/pam_modutil.h:53: included_from: Included from here.
sssd-2.13.0/src/sss_client/sss_pam_compat.h:31: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_gss.c:37: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.13.0/src/sss_client/sss_pam_compat.h:35: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
# 48| if (debug_enabled) { \
# 49| pam_error(pamh, "pam_sss_gss: " fmt, ## __VA_ARGS__); \
# 50|-> pam_syslog(pamh, LOG_ERR, fmt, ## __VA_ARGS__); \
# 51| } \
# 52| } while (0)
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'get_item_as_string'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:79:11: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:25: included_from: Included from here.
# 77| int ret;
# 78|
# 79|-> ret = pam_get_item(pamh, item, (void *)&str);
# 80| if (ret != PAM_SUCCESS || str == NULL || str[0] == '\0') {
# 81| return NULL;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_gssapi_init_send'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:224:11: warning[-Wanalyzer-malloc-leak]: leak of 'data'
# 222| req_data.data = data;
# 223|
# 224|-> ret = sss_pam_make_request(SSS_GSSAPI_INIT, &req_data, &reply, &reply_len,
# 225| &ret_errno);
# 226| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'domain'
# 279|
# 280| dlen = reply_len;
# 281|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
# 282| NULL);
# 283| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
# 279|
# 280| dlen = reply_len;
# 281|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
# 282| NULL);
# 283| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
# 279|
# 280| dlen = reply_len;
# 281|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
# 282| NULL);
# 283| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_gssapi_init_recv'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:281:11: warning[-Wanalyzer-malloc-leak]: leak of 'username'
# 279|
# 280| dlen = reply_len;
# 281|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &username,
# 282| NULL);
# 283| if (ret != EOK) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'domain'
# 286|
# 287| dlen = reply_len;
# 288|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
# 289| if (ret != EOK) {
# 290| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
# 286|
# 287| dlen = reply_len;
# 288|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
# 289| if (ret != EOK) {
# 290| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:288:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
# 286|
# 287| dlen = reply_len;
# 288|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &domain, NULL);
# 289| if (ret != EOK) {
# 290| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:294:11: warning[-Wanalyzer-malloc-leak]: leak of 'target'
# 292|
# 293| dlen = reply_len;
# 294|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &target, NULL);
# 295| if (ret != EOK) {
# 296| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:294:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
# 292|
# 293| dlen = reply_len;
# 294|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &target, NULL);
# 295| if (ret != EOK) {
# 296| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:300:11: warning[-Wanalyzer-malloc-leak]: leak of 'upn'
# 298|
# 299| dlen = reply_len;
# 300|-> ret = sss_readrep_copy_string(buf, &pctr, &reply_len, &dlen, &upn, NULL);
# 301| if (ret != EOK) {
# 302| goto done;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c: scope_hint: In function 'sssd_establish_sec_ctx_send'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:381:11: warning[-Wanalyzer-malloc-leak]: leak of 'data'
# 379|
# 380| req_data.data = data;
# 381|-> ret = sss_pam_make_request(SSS_GSSAPI_SEC_CTX, &req_data, (uint8_t**)_reply,
# 382| _reply_len, &ret_errno);
# 383| free(data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:585:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
# 583|
# 584| done:
# 585|-> sss_pam_lock();
# 586| sss_cli_close_socket();
# 587| sss_pam_unlock();
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:586:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
# 584| done:
# 585| sss_pam_lock();
# 586|-> sss_cli_close_socket();
# 587| sss_pam_unlock();
# 588| free(username);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_gss.c:587:5: warning[-Wanalyzer-malloc-leak]: leak of 'ccache'
sssd-2.13.0/src/sss_client/pam_sss_gss.c:546:9: note: in expansion of macro 'ERROR'
# 585| sss_pam_lock();
# 586| sss_cli_close_socket();
# 587|-> sss_pam_unlock();
# 588| free(username);
# 589| free(domain);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:291:11: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.13.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
# 289| for (c = 0; *pc_list != NULL && (*pc_list)[c] != NULL; c++); /* just counting */
# 290|
# 291|-> pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
# 292| if (pcl == NULL) {
# 293| return ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:291:11: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/sss_client/sss_cli.h:38: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
# 289| for (c = 0; *pc_list != NULL && (*pc_list)[c] != NULL; c++); /* just counting */
# 290|
# 291|-> pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
# 292| if (pcl == NULL) {
# 293| return ENOMEM;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:295:12: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
# 293| return ENOMEM;
# 294| }
# 295|-> pcl[c] = pc;
# 296| pcl[c + 1] = NULL;
# 297|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:295:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
# 293| return ENOMEM;
# 294| }
# 295|-> pcl[c] = pc;
# 296| pcl[c + 1] = NULL;
# 297|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:301:1: warning[-Wanalyzer-malloc-leak]: leak of 'pcl'
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
# 299|
# 300| return EOK;
# 301|-> }
# 302|
# 303| static errno_t pc_copy_string(size_t size, uint8_t *buf, size_t *off, char **out) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:301:1: warning[-Wanalyzer-malloc-leak]: leak of ‘pcl’
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
# 299|
# 300| return EOK;
# 301|-> }
# 302|
# 303| static errno_t pc_copy_string(size_t size, uint8_t *buf, size_t *off, char **out) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_password'
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:357:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
# 355|
# 356| ret = pc_list_add_pc(pc_list, pc);
# 357|-> if (ret != EOK) {
# 358| goto done;
# 359| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_password’
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:357:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/sss_client/pam_sss_prompt_config.c:813:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.13.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
# 355|
# 356| ret = pc_list_add_pc(pc_list, pc);
# 357|-> if (ret != EOK) {
# 358| goto done;
# 359| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/sssd_pac.c: scope_hint: In function 'sssdpac_import_authdata'
sssd-2.13.0/src/sss_client/sssd_pac.c:100:9: warning[-Wanalyzer-malloc-leak]: leak of 'data'
# 98|
# 99| if (sssdctx->data.data != NULL) {
# 100|-> krb5_free_data_contents(kcontext, &sssdctx->data);
# 101| }
# 102|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/sssd_pac.c: scope_hint: In function 'sssdpac_internalize'
sssd-2.13.0/src/sss_client/sssd_pac.c:283:12: warning[-Wanalyzer-malloc-leak]: leak of 'data.data'
# 281|
# 282| /* verified */
# 283|-> code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
# 284| if (code != 0) {
# 285| free(data.data);
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/sssd_pac.c:290:9: warning[-Wanalyzer-malloc-leak]: leak of 'data.data'
# 288|
# 289| if (sssdctx->data.data != NULL) {
# 290|-> krb5_free_data_contents(kcontext, &sssdctx->data);
# 291| }
# 292|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/tools/sssctl/sssctl_user_checks.c: scope_hint: In function ‘sss_getpwnam_check’
sssd-2.13.0/src/tools/sssctl/sssctl_user_checks.c:191:14: warning[-Wanalyzer-malloc-leak]: leak of ‘buffer’
# 189| }
# 190|
# 191|-> status = sss_getpwnam_r(user, &pwd, buffer, buflen, &nss_errno);
# 192| if (status != NSS_STATUS_SUCCESS) {
# 193| ERROR("sss_getpwnam_r failed with [%d].\n", status);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/tools/tools_mc_util.c: scope_hint: In function ‘sss_memcache_invalidate’
sssd-2.13.0/src/tools/tools_mc_util.c:92:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(mc_filename, 2)’
# 90| }
# 91|
# 92|-> ret = sss_br_lock_file(mc_fd, 0, 1, retries, t);
# 93| if (ret == EACCES) {
# 94| DEBUG(SSSDBG_TRACE_FUNC,
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:54: included_from: Included from here.
sssd-2.13.0/src/util/sss_krb5.h:36: included_from: Included from here.
sssd-2.13.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:36: included_from: Included from here.
sssd-2.13.0/src/krb5_plugin/sssd_krb5_locator_plugin.c: scope_hint: In function 'get_krb5info'
sssd-2.13.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(krb5info_name, 0)'
sssd-2.13.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/krb5_plugin/sssd_krb5_locator_plugin.c:355:11: note: in expansion of macro 'sss_atomic_read_s'
# 35| ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
# 36|
# 37|-> #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38| #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.13.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/util/backup_file.c:87:19: note: in expansion of macro 'sss_atomic_read_s'
# 35| ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
# 36|
# 37|-> #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38| #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:54: included_from: Included from here.
sssd-2.13.0/src/providers/be_netlink.c:37: included_from: Included from here.
sssd-2.13.0/src/providers/be_netlink.c: scope_hint: In function ‘has_ethernet_encapsulation’
sssd-2.13.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&type_path, 0)’
sssd-2.13.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.13.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.13.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.13.0/src/providers/be_netlink.c:201:11: note: in expansion of macro ‘sss_atomic_read_s’
# 35| ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
# 36|
# 37|-> #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38| #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:54: included_from: Included from here.
sssd-2.13.0/src/tools/sss_seed.c:33: included_from: Included from here.
sssd-2.13.0/src/tools/sss_seed.c: scope_hint: In function ‘seed_password_input_file’
sssd-2.13.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(filename, 0)’
sssd-2.13.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.13.0/src/tools/sss_seed.c:23: included_from: Included from here.
sssd-2.13.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
sssd-2.13.0/src/tools/sss_seed.c:290:11: note: in expansion of macro ‘sss_atomic_read_s’
# 35| ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
# 36|
# 37|-> #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38| #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/sss_client/pam_sss.c:53: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss.c: scope_hint: In function 'display_pw_reset_message.part.0'
sssd-2.13.0/src/util/atomic_io.h:37:40: warning[-Wanalyzer-malloc-leak]: leak of 'msg_buf'
sssd-2.13.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/sss_client/pam_sss.c:32: included_from: Included from here.
sssd-2.13.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
sssd-2.13.0/src/sss_client/pam_sss.c:445:17: note: in expansion of macro 'sss_atomic_read_s'
# 35| ssize_t sss_atomic_io_s(int fd, void *buf, size_t n, bool do_read);
# 36|
# 37|-> #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38| #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:54: included_from: Included from here.
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:22: included_from: Included from here.
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c: scope_hint: In function ‘sss_mc_save_corrupted’
sssd-2.13.0/src/util/atomic_io.h:38:40: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘creat(talloc_asprintf(talloc_named_const(0, 0, "talloc_new: src/responder/nss/nsssrv_mmap_cache.c:138"), "%s_%s", *mc_ctx.file, "corrupted"), 384)’
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.13.0/src/util/util.h:45: included_from: Included from here.
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
sssd-2.13.0/src/responder/nss/nsssrv_mmap_cache.c:161:15: note: in expansion of macro ‘sss_atomic_write_s’
# 36|
# 37| #define sss_atomic_read_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, true)
# 38|-> #define sss_atomic_write_s(fd, buf, n) sss_atomic_io_s(fd, buf, n, false)
# 39|
# 40| /**
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/backup_file.c: scope_hint: In function 'backup_file'
sssd-2.13.0/src/util/backup_file.c:57:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.13.0/src/util/util.h:45: included_from: Included from here.
sssd-2.13.0/src/util/backup_file.c:22: included_from: Included from here.
# 55| for (i = 0; i < 10; i++) {
# 56| if (i == 0) {
# 57|-> dst_file = talloc_asprintf(tmp_ctx, "%s.bak", src_file);
# 58| } else {
# 59| dst_file = talloc_asprintf(tmp_ctx, "%s.bak%d", src_file, i);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/backup_file.c:59:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.13.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.13.0/src/util/util.h:54: included_from: Included from here.
# 57| dst_file = talloc_asprintf(tmp_ctx, "%s.bak", src_file);
# 58| } else {
# 59|-> dst_file = talloc_asprintf(tmp_ctx, "%s.bak%d", src_file, i);
# 60| }
# 61| if (!dst_file) {
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/backup_file.c:67:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
# 65|
# 66| errno = 0;
# 67|-> dst_fd = open(dst_file, O_CREAT|O_EXCL|O_WRONLY, 0600);
# 68| ret = errno;
# 69|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/backup_file.c:116:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
# 114|
# 115| done:
# 116|-> if (src_fd != -1) close(src_fd);
# 117| if (dst_fd != -1) close(dst_fd);
# 118| talloc_free(tmp_ctx);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/child_handlers.c: scope_hint: In function 'exec_child_ex'
sssd-2.13.0/src/util/child_handlers.c:459:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
# 457| if ((pipefd_from_child != NULL) && (pipefd_from_child[1] != -1)
# 458| && (child_out_fd != -1)) {
# 459|-> close(pipefd_from_child[0]);
# 460| ret = dup2(pipefd_from_child[1], child_out_fd);
# 461| if (ret == -1) {
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/debug.c: scope_hint: In function 'journal_send'
sssd-2.13.0/src/util/debug.c:248:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/util/debug.c:37: included_from: Included from here.
sssd-2.13.0/src/util/debug.c:288:14: note: in expansion of macro 'DEBUG_IS_SET'
# 246| * source code location and other tracking data.
# 247| */
# 248|-> res = sd_journal_send_with_location(
# 249| code_file, code_line, function,
# 250| "MESSAGE=%s", message,
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/debug.c: scope_hint: In function 'sss_vdebug_fn'
sssd-2.13.0/src/util/debug.c:322:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/util/debug.c:288:14: note: in expansion of macro 'DEBUG_IS_SET'
# 320| /* Emergency fallback, send to STDERR */
# 321| vfprintf(stderr, format, ap_fallback);
# 322|-> fflush(stderr);
# 323| }
# 324| va_end(ap_fallback);
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/debug.c:345:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 343| }
# 344| if (debug_microseconds == SSSDBG_MICROSECONDS_ENABLED) {
# 345|-> sss_debug_backtrace_printf(level, "%s:%.6ld): ",
# 346| last_time_str, tv.tv_usec);
# 347| } else {
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/debug.c:348:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
# 346| last_time_str, tv.tv_usec);
# 347| } else {
# 348|-> sss_debug_backtrace_printf(level, "%s): ", last_time_str);
# 349| }
# 350| }
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/debug.c:352:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/util/debug.c:482:5: note: in expansion of macro 'DEBUG'
# 350| }
# 351|
# 352|-> sss_debug_backtrace_printf(level, "[%s] [%s] (%#.4x): ",
# 353| debug_prg_name, function, level);
# 354|
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/debug.c: scope_hint: In function 'open_debug_file_ex'
sssd-2.13.0/src/util/debug.c:426:17: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(logpath, "a")'
# 424|
# 425| if(want_cloexec) {
# 426|-> flags = fcntl(debug_fd, F_GETFD, 0);
# 427| (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
# 428| }
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/debug.c:426:17: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(logpath, "a")'
# 424|
# 425| if(want_cloexec) {
# 426|-> flags = fcntl(debug_fd, F_GETFD, 0);
# 427| (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
# 428| }
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/debug.c:427:16: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(logpath, "a")'
# 425| if(want_cloexec) {
# 426| flags = fcntl(debug_fd, F_GETFD, 0);
# 427|-> (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
# 428| }
# 429|
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/debug.c:427:16: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(logpath, "a")'
# 425| if(want_cloexec) {
# 426| flags = fcntl(debug_fd, F_GETFD, 0);
# 427|-> (void) fcntl(debug_fd, F_SETFD, flags | FD_CLOEXEC);
# 428| }
# 429|
Error: GCC_ANALYZER_WARNING (CWE-910):
sssd-2.13.0/src/util/debug.c: scope_hint: In function 'rotate_debug_files'
sssd-2.13.0/src/util/debug.c:449:19: warning[-Wanalyzer-double-fclose]: double 'fclose' of FILE '_sss_debug_file'
/usr/include/systemd/_sd-common.h:20: included_from: Included from here.
/usr/include/systemd/sd-journal.h:23: included_from: Included from here.
sssd-2.13.0/src/util/debug.c:34: included_from: Included from here.
# 447| do {
# 448| error = 0;
# 449|-> ret = fclose(_sss_debug_file);
# 450| if (ret != 0) {
# 451| error = errno;
Error: GCC_ANALYZER_WARNING (CWE-415):
sssd-2.13.0/src/util/debug.c:449:19: warning[-Wanalyzer-double-free]: double-'fclose' of '_sss_debug_file'
# 447| do {
# 448| error = 0;
# 449|-> ret = fclose(_sss_debug_file);
# 450| if (ret != 0) {
# 451| error = errno;
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(src_file, 0)'
sssd-2.13.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/backup_file.c:73:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/child_handlers.c: scope_hint: In function 'sss_child_start'
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:696:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:722:9: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/child_handlers.c:33: included_from: Included from here.
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'ret'
sssd-2.13.0/src/util/child_handlers.c:463:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:28: included_from: Included from here.
sssd-2.13.0/src/util/child_handlers.c:463:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:463:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/responder/common/responder_common.c:36: included_from: Included from here.
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
sssd-2.13.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/responder/common/responder_common.c:31: included_from: Included from here.
sssd-2.13.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/responder/common/responder_common.c:742:9: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/tools/common/sss_process.c:25: included_from: Included from here.
sssd-2.13.0/src/tools/common/sss_process.c: scope_hint: In function 'sss_pid'
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("/run/sssd/sssd.pid", "r")'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/tools/common/sss_process.c:25: included_from: Included from here.
sssd-2.13.0/src/tools/common/sss_process.c: scope_hint: In function ‘sss_pid’
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("/run/sssd/sssd.pid", "r")’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of 'fopen("/run/sssd/sssd.pid", "r")'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("/run/sssd/sssd.pid", "r")’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/tools/common/sss_process.c:67:13: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/child_bootstrap.h:27: included_from: Included from here.
sssd-2.13.0/src/providers/proxy/proxy_child.c:42: included_from: Included from here.
sssd-2.13.0/src/providers/proxy/proxy_child.c: scope_hint: In function ‘proxy_internal_conv’
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-malloc-leak]: leak of ‘reply’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/proxy/proxy_child.c:83:17: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-476):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/providers/ad/ad_gpo.c:39: included_from: Included from here.
sssd-2.13.0/src/providers/ad/ad_gpo.c: scope_hint: In function 'ad_gpo_filter_gpos_by_cse_guid'
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-null-dereference]: dereference of NULL 'dacl_filtered_gpo'
sssd-2.13.0/src/providers/ad/ad_gpo.c:1322:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/util.h:45: included_from: Included from here.
sssd-2.13.0/src/providers/ad/ad_gpo.c:1330:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/providers/ad/ad_gpo.c:1322:9: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/sbus/request/sbus_message.c:25: included_from: Included from here.
sssd-2.13.0/src/sbus/request/sbus_message.c: scope_hint: In function 'sbus_message_bound'
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
sssd-2.13.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/sbus/request/sbus_message.c:22: included_from: Included from here.
sssd-2.13.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/sbus/request/sbus_message.c:96:9: note: in expansion of macro 'DEBUG'
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-404):
sssd-2.13.0/src/util/util.h:58: included_from: Included from here.
sssd-2.13.0/src/providers/data_provider.h:40: included_from: Included from here.
sssd-2.13.0/src/providers/backend.h:25: included_from: Included from here.
sssd-2.13.0/src/providers/data_provider/dp.h:27: included_from: Included from here.
sssd-2.13.0/src/providers/data_provider/dp_targets.c:25: included_from: Included from here.
sssd-2.13.0/src/providers/data_provider/dp_targets.c: scope_hint: In function ‘_dp_target_enabled’
sssd-2.13.0/src/util/debug.h:138:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
sssd-2.13.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
sssd-2.13.0/src/providers/data_provider/dp_targets.c:56:13: note: in expansion of macro ‘DEBUG’
# 136| */
# 137| #define DEBUG(level, format, ...) do { \
# 138|-> sss_debug_fn(__FILE__, __LINE__, __FUNCTION__, \
# 139| level, \
# 140| format, ##__VA_ARGS__); \
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/files.c: scope_hint: In function 'remove_tree_with_ctx'
sssd-2.13.0/src/util/files.c:143:22: warning[-Wanalyzer-malloc-leak]: leak of 'fdopendir(sss_openat_cloexec(parent_fd, dir_name, 196608, & ret))'
# 141| }
# 142|
# 143|-> while ((result = readdir(rootdir)) != NULL) {
# 144| if (strcmp(result->d_name, ".") == 0 ||
# 145| strcmp(result->d_name, "..") == 0) {
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/find_uid.c: scope_hint: In function 'get_active_uid_linux'
sssd-2.13.0/src/util/find_uid.c:256:22: warning[-Wanalyzer-malloc-leak]: leak of 'opendir("/proc")'
sssd-2.13.0/src/util/find_uid.c:28: included_from: Included from here.
# 254|
# 255| errno = 0;
# 256|-> while ((dirent = readdir(proc_dir)) != NULL) {
# 257| if (only_numbers(dirent->d_name) != 0) {
# 258| continue;
Error: GCC_ANALYZER_WARNING (CWE-401):
sssd-2.13.0/src/util/find_uid.c: scope_hint: In function ‘get_active_uid_linux’
sssd-2.13.0/src/util/find_uid.c:256:22: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("/proc")’
sssd-2.13.0/src/util/find_uid.c:28: included_from: Included from here.
# 254|
# 255| errno = 0;
# 256|-> while ((dirent = readdir(proc_dir)) != NULL) {
# 257| if (only_numbers(dirent->d_name) != 0) {
# 258| continue;
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/util/util.c: scope_hint: In function 'domain_to_basedn'
sssd-2.13.0/src/util/util.c:574:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 572| dn = talloc_strdup(memctx, "dc=");
# 573|
# 574|-> while ((p = strchr(s, '.'))) {
# 575| l = p - s;
# 576| dn = talloc_asprintf_append_buffer(dn, "%.*s,dc=", l, s);
Error: COMPILER_WARNING (CWE-704):
sssd-2.13.0/src/util/util.c: scope_hint: In function ‘domain_to_basedn’
sssd-2.13.0/src/util/util.c:574:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 572| dn = talloc_strdup(memctx, "dc=");
# 573|
# 574|-> while ((p = strchr(s, '.'))) {
# 575| l = p - s;
# 576| dn = talloc_asprintf_append_buffer(dn, "%.*s,dc=", l, s);
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[(int)pid]'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
# 125| #define FD_CLOSE(fd) do { \
# 126| if (fd != -1) { \
# 127|-> close(fd); \
# 128| fd = -1; \
# 129| } \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
# 125| #define FD_CLOSE(fd) do { \
# 126| if (fd != -1) { \
# 127|-> close(fd); \
# 128| fd = -1; \
# 129| } \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/child_common.h:34: included_from: Included from here.
sssd-2.13.0/src/util/child_handlers.c:36: included_from: Included from here.
sssd-2.13.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:42:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
# 125| #define FD_CLOSE(fd) do { \
# 126| if (fd != -1) { \
# 127|-> close(fd); \
# 128| fd = -1; \
# 129| } \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
# 125| #define FD_CLOSE(fd) do { \
# 126| if (fd != -1) { \
# 127|-> close(fd); \
# 128| fd = -1; \
# 129| } \
Error: GCC_ANALYZER_WARNING (CWE-775):
sssd-2.13.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:730:13: note: in expansion of macro 'DEBUG'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:787:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/util.h:126:9: note: in definition of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:41:5: note: in expansion of macro 'FD_CLOSE'
sssd-2.13.0/src/util/child_handlers.c:788:9: note: in expansion of macro 'PIPE_CLOSE'
# 125| #define FD_CLOSE(fd) do { \
# 126| if (fd != -1) { \
# 127|-> close(fd); \
# 128| fd = -1; \
# 129| } \