Attachment 601641 Details for Bug 772848 – full scan result for libvirt-0.8.2-29

full scan result for libvirt-0.8.2-29

libvirt-0.8.2-29.el5.err (text/plain), 23.67 KB, created by zhe peng on 2012-08-01 03:10:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: zhe peng

Created: 2012-08-01 03:10:58 UTC

Size: 23.67 KB

patch

obsolete

>Error: CHECKED_RETURN (CWE-252):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/network_conf.c:414: example_checked: "virUUIDParse(tmp, def->uuid)" has its value checked in "virUUIDParse(tmp, def->uuid) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/node_device_conf.c:1044: example_checked: "virUUIDParse(tmp, data->system.hardware.uuid)" has its value checked in "virUUIDParse(tmp, data->system.hardware.uuid) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:1736: example_checked: "virUUIDParse(uuid, ret->uuid)" has its value checked in "virUUIDParse(uuid, ret->uuid) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/secret_conf.c:168: example_checked: "virUUIDParse(uuidstr, def->uuid)" has its value checked in "virUUIDParse(uuidstr, def->uuid) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/storage_conf.c:651: example_checked: "virUUIDParse(uuid, ret->uuid)" has its value checked in "virUUIDParse(uuid, ret->uuid) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/xen/xend_internal.c:2137: check_return: Calling function "virUUIDParse" without checking return value (as is done elsewhere 20 out of 22 times).
>/builddir/build/BUILD/libvirt-0.8.2/src/xen/xend_internal.c:2137: unchecked_value: No check of the return value of "virUUIDParse(tmp, def->uuid)".
>
>Error: CHECKED_RETURN (CWE-252):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:785: example_checked: "virAsprintf(&sock_dir_prefix, "%s/run/libvirt", base_dir_prefix)" has its value checked in "virAsprintf(&sock_dir_prefix, "%s/run/libvirt", base_dir_prefix) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:789: example_checked: "virAsprintf(&sock_dir_prefix, "%s/.libvirt", base_dir_prefix)" has its value checked in "virAsprintf(&sock_dir_prefix, "%s/.libvirt", base_dir_prefix) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:796: example_checked: "virAsprintf(sockname, "%s/libvirt-sock", sock_dir_prefix)" has its value checked in "virAsprintf(sockname, "%s/libvirt-sock", sock_dir_prefix) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:799: example_checked: "virAsprintf(roSockname, "%s/libvirt-sock-ro", sock_dir_prefix)" has its value checked in "virAsprintf(roSockname, "%s/libvirt-sock-ro", sock_dir_prefix) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:805: example_checked: "virAsprintf(sockname, "@%s/libvirt-sock", sock_dir_prefix)" has its value checked in "virAsprintf(sockname, "@%s/libvirt-sock", sock_dir_prefix) < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/storage_file.c:431: check_return: Calling function "virAsprintf" without checking return value (as is done elsewhere 256 out of 257 times).
>/builddir/build/BUILD/libvirt-0.8.2/src/util/storage_file.c:431: unchecked_value: No check of the return value of "virAsprintf(&res, "%.*s/%s", (int)d_len, base_file, path)".
>
>Error: CHECKED_RETURN (CWE-252):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:3069: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/python/libvirt-override.c:3569: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:826: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:764: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:888: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/tests/xencapstest.c:171: check_return: Calling function "virInitialize" without checking return value (as is done elsewhere 16 out of 19 times).
>/builddir/build/BUILD/libvirt-0.8.2/tests/xencapstest.c:171: unchecked_value: No check of the return value of "virInitialize()".
>
>Error: CHECKED_RETURN (CWE-252):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:3069: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/python/libvirt-override.c:3569: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:826: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:764: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:888: example_checked: "virInitialize()" has its value checked in "virInitialize() < 0".
>/builddir/build/BUILD/libvirt-0.8.2/tests/shunloadhelper.c:46: check_return: Calling function "virInitialize" without checking return value (as is done elsewhere 16 out of 19 times).
>/builddir/build/BUILD/libvirt-0.8.2/tests/shunloadhelper.c:46: unchecked_value: No check of the return value of "virInitialize()".
>
>Error: DEADCODE (CWE-561):
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_condition: On this path, the condition "maplen < 0" cannot be true.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: at_least: After this line, the value of "maplen" is at least 1.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: new_values: Noticing condition "maplen <= 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_line: Execution cannot reach this expression "maxinfo < 0" inside statement "if (!cpumaps ? maplen != 0 ...".
>
>Error: DEADCODE (CWE-561):
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_condition: On this path, the condition "maxinfo < 0" cannot be true.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5228: at_least: After this line, the value of "maxinfo" is at least 1.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5228: new_values: Noticing condition "maxinfo < 1".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_line: Execution cannot reach this expression "maxinfo < -2147483648 / maplen" inside statement "if (!cpumaps ? maplen != 0 ...".
>
>Error: DEADCODE (CWE-561):
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_condition: On this path, the condition "maplen == 0" cannot be true.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: at_least: After this line, the value of "maplen" is at least 1.
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: new_values: Noticing condition "maplen < 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: new_values: Noticing condition "maplen <= 0".
>/builddir/build/BUILD/libvirt-0.8.2/src/libvirt.c:5235: dead_error_line: Execution cannot reach this expression "0" inside statement "if (!cpumaps ? maplen != 0 ...".
>
>Error: DEADCODE (CWE-561):
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:521: dead_error_condition: On this path, the condition "list != NULL" cannot be true.
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:479: const: After this line, the value of "list" is equal to 0.
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:511: const: After this line, the value of "list" is equal to 0.
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:479: assignment: Assigning: "list" = "NULL".
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:511: new_values: Noticing condition "list != NULL".
>/builddir/build/BUILD/libvirt-0.8.2/src/secret/secret_driver.c:522: dead_error_begin: Execution cannot reach this statement "virSecretEntryPtr s;".
>
>Error: FORWARD_NULL (CWE-476):
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:3964: var_compare_op: Comparing "def->graphics" to null implies that "def->graphics" might be null.
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:4620: var_deref_op: Dereferencing null variable "def->graphics".
>
>Error: FORWARD_NULL (CWE-476):
>/builddir/build/BUILD/libvirt-0.8.2/src/nwfilter/nwfilter_ebiptables_driver.c:3003: var_compare_op: Comparing "inst" to null implies that "inst" might be null.
>/builddir/build/BUILD/libvirt-0.8.2/src/nwfilter/nwfilter_ebiptables_driver.c:3008: var_deref_op: Dereferencing null variable "inst".
>
>Error: FORWARD_NULL (CWE-476):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:2320: var_compare_op: Comparing "server->clients" to null implies that "server->clients" might be null.
>/builddir/build/BUILD/libvirt-0.8.2/daemon/libvirtd.c:2340: var_deref_op: Dereferencing null variable "server->clients".
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:1216: unterminated_case: This case (value 4) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:1218: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:1201: unterminated_case: This case (value 8) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:1203: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:2500: unterminated_case: This case (value 4) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:2502: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:2489: unterminated_case: This case (value 8) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/nwfilter_conf.c:2491: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5618: unterminated_case: This case (value 71) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5620: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5620: unterminated_case: This case (value 77) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5622: fallthrough: The above case falls through to this one.
>
>Error: MISSING_BREAK (CWE-484):
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5616: unterminated_case: This case (value 84) is not terminated by a 'break' statement.
>/builddir/build/BUILD/libvirt-0.8.2/tools/virsh.c:5618: fallthrough: The above case falls through to this one.
>
>Error: NULL_RETURNS (CWE-476):
>/builddir/build/BUILD/libvirt-0.8.2/src/conf/network_conf.c:921: example_checked: "strstr(def->bridge, "%d")" has its value checked in "strstr(def->bridge, "%d")".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_util.c:142: example_checked: "strstr(queryParam->value, "://")" has its value checked in "(tmp = strstr(queryParam->value, "://")) != NULL".
>/builddir/build/BUILD/libvirt-0.8.2/src/node_device/node_device_linux_sysfs.c:87: example_assign: Assigning: "p" = return value from "strstr(buf, "0x")".
>/builddir/build/BUILD/libvirt-0.8.2/src/node_device/node_device_linux_sysfs.c:88: example_checked: "p" has its value checked in "p != NULL".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:3559: example_checked: "strstr(emulator, "kvm")" has its value checked in "strstr(emulator, "kvm")".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:5415: example_assign: Assigning: "tmp" = return value from "strstr(nics[i], "vlan=")".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:5417: example_checked: "tmp" has its value checked in "tmp".
>/builddir/build/BUILD/libvirt-0.8.2/src/storage/storage_backend.c:596: returned_null: Function "strstr" returns null (checked 114 out of 117 times).
>/builddir/build/BUILD/libvirt-0.8.2/src/storage/storage_backend.c:596: var_assigned: Assigning: "start" = null return value from "strstr".
>/builddir/build/BUILD/libvirt-0.8.2/src/storage/storage_backend.c:597: dereference: Dereferencing a pointer that might be null "start" when calling "strstr". (The dereference is assumed on the basis of the 'nonnull' parameter attribute.)
>
>Error: OVERRUN_STATIC (CWE-119):
>/builddir/build/BUILD/libvirt-0.8.2/src/util/virtaudit.c:128: overrun-local: Overrunning static array "record_types", with 3 elements, at position 3 with index variable "type".
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1425: alloc_arg: Calling allocation function "esxVI_ObjectSpec_Alloc" on "objectSpec".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi_types.generated.c:1164: alloc_arg: "esxVI_Alloc" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1147: alloc_arg: "virAllocN" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1471: leaked_storage: Variable "objectSpec" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1436: alloc_arg: Calling allocation function "esxVI_PropertySpec_Alloc" on "propertySpec".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi_types.generated.c:1899: alloc_arg: "esxVI_Alloc" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1147: alloc_arg: "virAllocN" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1471: leaked_storage: Variable "propertySpec" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:4569: alloc_fn: Calling allocation function "virSocketFormatAddr".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/network.c:148: alloc_arg: "virAllocN" allocates memory that is stored into "out".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/network.c:151: noescape: Variable "out" is not freed or pointed-to in function "inet_ntop".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/network.c:156: return_alloc: Returning allocated memory "out".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:4569: var_assign: Assigning: "addr" =  storage returned from "virSocketFormatAddr(channel->target.addr)".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:4572: leaked_storage: Variable "addr" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/util/uuid.c:256: open_fn: Calling opening function "open".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/uuid.c:256: var_assign: Assigning: "fd" =  handle returned from "open(paths[i], 0)".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/uuid.c:257: off_by_one: Testing whether handle "fd" is strictly greater than zero is suspicious.  Did you intend to include equality with zero?  "fd" leaks when it is zero.
>/builddir/build/BUILD/libvirt-0.8.2/src/util/uuid.c:265: leaked_handle: Handle variable "fd" going out of scope leaks the handle.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_driver.c:7240: alloc_arg: Calling allocation function "qemudProbeMachineTypes" on "machines".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:525: alloc_arg: "qemudParseMachineTypesStr" allocates memory that is stored into "*machines".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:464: alloc_arg: "virReallocN" allocates memory that is stored into "list".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:160: alloc_fn: Storage is returned from allocation function "realloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:160: var_assign: Assigning: "tmp" = "realloc(*((void **)ptrptr), size * count)".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:163: var_assign: Assigning: "*((void **)ptrptr)" = "tmp".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:475: noescape: Variable "list" is not freed or pointed-to in function "__coverity_memmove".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:490: var_assign: Assigning: "*machines" = "list".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_driver.c:7242: leaked_storage: Variable "machines" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vmx.c:921: alloc_fn: Calling allocation function "virConfReadMem".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:791: alloc_fn: Storage is returned from allocation function "virConfParse".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:709: alloc_fn: Storage is returned from allocation function "virConfCreate".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:188: alloc_fn: Storage is returned from allocation function "virConfNew".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:166: alloc_arg: "virAlloc" allocates memory that is stored into "ret".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:100: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:100: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(1UL, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:173: return_alloc: Returning allocated memory "ret".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:188: var_assign: Assigning: "ret" = "virConfNew()".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:193: return_alloc: Returning allocated memory "ret".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:709: var_assign: Assigning: "ctxt.conf" = "virConfCreate(filename, flags)".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:720: return_alloc: Returning allocated memory "ctxt.conf".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/conf.c:791: return_alloc_fn: Directly returning storage allocated by "virConfParse".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vmx.c:921: var_assign: Assigning: "conf" =  storage returned from "virConfReadMem(vmx, strlen(vmx), 1U)".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vmx.c:929: leaked_storage: Variable "conf" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:2845: alloc_arg: Calling allocation function "esxVI_ObjectSpec_Alloc" on "objectSpec".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi_types.generated.c:1164: alloc_arg: "esxVI_Alloc" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1147: alloc_arg: "virAllocN" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:2979: leaked_storage: Variable "objectSpec" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:2852: alloc_arg: Calling allocation function "esxVI_PropertySpec_Alloc" on "propertySpec".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi_types.generated.c:1899: alloc_arg: "esxVI_Alloc" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1147: alloc_arg: "virAllocN" allocates memory that is stored into "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:2979: leaked_storage: Variable "propertySpec" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/remote.c:5025: alloc_arg: Calling allocation function "virAlloc" on "parent_p".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:100: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:100: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(1UL, size)".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/remote.c:5034: leaked_storage: Variable "parent_p" going out of scope leaks the storage it points to.
>
>Error: RESOURCE_LEAK (CWE-404):
>/builddir/build/BUILD/libvirt-0.8.2/daemon/remote.c:833: alloc_arg: Calling allocation function "virAllocN" on "params".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: alloc_fn: Storage is returned from allocation function "calloc".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:128: var_assign: Assigning: "*((void **)ptrptr)" = "calloc(count, size)".
>/builddir/build/BUILD/libvirt-0.8.2/daemon/remote.c:843: leaked_storage: Variable "params" going out of scope leaks the storage it points to.
>
>Error: RETURN_LOCAL (CWE-562):
>/builddir/build/BUILD/libvirt-0.8.2/gnulib/lib/areadlink.c:64: local_ptr_assign_local: Assigning: "buffer" = "initial_buf" (address of local variable "initial_buf").
>/builddir/build/BUILD/libvirt-0.8.2/gnulib/lib/areadlink.c:113: return_local_addr_alias: Returning pointer "buffer" which points to local variable "initial_buf".
>
>Error: REVERSE_INULL (CWE-476):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1425: deref_ptr_in_call: Dereferencing pointer "objectSpec".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi_types.generated.c:1164: deref_parm: Directly dereferencing parameter "*ptrptr".
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_vi.c:1459: check_after_deref: Dereferencing "objectSpec" before a null check.
>
>Error: SIGN_EXTENSION (CWE-194):
>/builddir/build/BUILD/libvirt-0.8.2/python/libvirt-override.c:407: sign_extension: Suspicious implicit sign extension: "dominfo.nrVirtCpu" with type "unsigned short" (16 bits, unsigned) is promoted in "dominfo.nrVirtCpu * cpumaplen" to type "int" (32 bits, signed), then sign-extended to type "unsigned long" (64 bits, unsigned).  If "dominfo.nrVirtCpu * cpumaplen" is greater than 0x7FFFFFFF, the upper bits of the result will all be 1.
>
>Error: UNINIT (CWE-457):
>/builddir/build/BUILD/libvirt-0.8.2/src/xen/xend_internal.c:318: var_decl: Declaring variable "buffer" without initializer.
>/builddir/build/BUILD/libvirt-0.8.2/src/xen/xend_internal.c:322: uninit_use_in_call: Using uninitialized element of array "buffer" when calling "sreads".
>/builddir/build/BUILD/libvirt-0.8.2/src/xen/xend_internal.c:286: read_parm: Reading a parameter value.
>
>Error: UNUSED_VALUE (CWE-563):
>/builddir/build/BUILD/libvirt-0.8.2/src/esx/esx_storage_driver.c:563: returned_pointer: Pointer "vmfsInfo" returned by "esxVI_VmfsDatastoreInfo_DynamicCast(info)" is never used.
>
>Error: USE_AFTER_FREE (CWE-416):
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:856: alias: Assigning: "binary" = "kvmbin". Now both point to the same storage.
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:1015: freed_arg: "virFree" frees "binary".
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:283: freed_arg: "free" frees parameter "*((void **)ptrptr)".
>/builddir/build/BUILD/libvirt-0.8.2/src/qemu/qemu_conf.c:1016: double_free: Calling "virFree" frees pointer "kvmbin" which has already been freed.
>/builddir/build/BUILD/libvirt-0.8.2/src/util/memory.c:283: freed_arg: "free" frees parameter "*((void **)ptrptr)".

Actions: View

Attachments on bug 772848: 594707 | 594709 | 601641