/tmp/build/foma/foma-0.10.0+g279~a2d32b38/define.c

Bug Summary

File:	define.c
Warning:	line 149, column 9 Access to field 'name' results in a dereference of a null pointer (loaded from variable 'def')

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name define.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 2 -fhalf-no-semantic-interposition -mframe-pointer=all -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/tmp/build/foma/foma-0.10.0+g279~a2d32b38 -resource-dir /usr/lib/llvm-16/lib/clang/16 -D _GNU_SOURCE -D foma_shared_EXPORTS -I /tmp/build/foma/foma-0.10.0+g279~a2d32b38 -internal-isystem /usr/lib/llvm-16/lib/clang/16/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/14/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -Wno-missing-field-initializers -Wno-deprecated -Wno-unused-parameter -std=c18 -fdebug-compilation-dir=/tmp/build/foma/foma-0.10.0+g279~a2d32b38 -ferror-limit 19 -fvisibility=hidden -fgnuc-version=4.2.1 -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/build/foma/scan-build/2024-09-11-155945-2678-1 -x c /tmp/build/foma/foma-0.10.0+g279~a2d32b38/define.c

1#include <stdio.h>
2#include <string.h>
3#include <stdlib.h>
4#include "foma.h"

6extern int g_verbose;
7struct defined_networks   *g_defines;
8struct defined_functions  *g_defines_f;

10/* Find a defined symbol from the symbol table */
11/* Return the corresponding FSM                */
12struct fsm *find_defined(struct defined_networks *def, char *string) {
  struct defined_networks *d;
  for (d = def; d != NULL((void*)0); d = d->next) {
if (d->name != NULL((void*)0) && strcmp(string, d->name) == 0) {
   return(d->net);
}
  }
  return NULL((void*)0);
20}

22struct defined_networks *defined_networks_init(void) {
  struct defined_networks *def;
  def = calloc(1, sizeof(struct defined_networks)); /* Dummy first entry, so we can maintain the ptr */
  return def;
26}

28struct defined_functions *defined_functions_init(void) {
  struct defined_functions *deff;
  deff = calloc(1, sizeof(struct defined_functions)); /* Dummy first entry */
  return deff;
32}

34/* Removes a defined network from the list                 */
35/* Returns 0 on success, 1 if the definition did not exist */
36/* Undefines all if NULL is passed as the string argument  */

38int remove_defined(struct defined_networks *def, char *string) {
  struct defined_networks *d, *d_prev, *d_next;
  int exists = 0;
  /* Undefine all */
  if (string == NULL((void*)0)) {
for (d = def; d != NULL((void*)0); d = d_next) {
   d_next = d->next;
   if (d->net != NULL((void*)0))
       fsm_destroy(d->net);
   if (d->name != NULL((void*)0))
       free(d->name);
}
return 0;
  }
  d_prev = NULL((void*)0);
  for (d = def; d != NULL((void*)0); d_prev = d, d = d->next) {
if (d->name != NULL((void*)0) && strcmp(d->name, string) == 0) {
   exists = 1;
   break;
}
  }
  if (exists == 0) {
return 1;
  }
  if (d == def) {
if (d->next != NULL((void*)0)) {
   fsm_destroy(d->net);
   free(d->name);
   d->name = d->next->name;
   d->net = d->next->net;
   d_next = d->next->next;
   free(d->next);
   d->next = d_next;
} else {
   fsm_destroy(d->net);
   free(d->name);
   d->next = NULL((void*)0);
   d->name = NULL((void*)0);
   d->net = NULL((void*)0);
}
  } else {
fsm_destroy(d->net);
free(d->name);
d_prev->next = d->next;
free(d);
  }
  return 0;
85}

87/* Finds defined regex "function" based on name, numargs */
88/* Returns the corresponding regex                       */
89char *find_defined_function(struct defined_functions *deff, char *name, int numargs) {
  struct defined_functions *d;
  for (d = deff ; d != NULL((void*)0); d = d->next) {
      if (d->name != NULL((void*)0) && strcmp(d->name, name) == 0 && d->numargs == numargs) {
          return(d->regex);
      }
  }
  return NULL((void*)0);
97}

99/* Add a function to list of defined functions */
100int add_defined_function(struct defined_functions *deff, char *name, char *regex, int numargs) {
  struct defined_functions *d;
  for (d = deff; d != NULL((void*)0); d = d->next) {
if (d->name != NULL((void*)0) && strcmp(d->name, name) == 0 && d->numargs == numargs) {
   free(d->regex);
   d->regex = strdup(regex);
          if (g_verbose)
          {
              fprintf(stderrstderr,"redefined %s@%i)\n", name, numargs);
              fflush(stderrstderr);
          }
   return 1;
}
  }
  if (deff->name == NULL((void*)0)) {
d = deff;
  } else {
d = malloc(sizeof(struct defined_functions));
d->next = deff->next;
deff->next = d;
  }
  d->name = strdup(name);
  d->regex = strdup(regex);
  d->numargs = numargs;
  return 0;
125}

127/* Add a network to list of defined networks */
128/* Returns 0 on success or 1 on redefinition or -1 if name is too long */
129/* Always maintain head of list at same ptr */

131int add_defined(struct defined_networks *def, struct fsm *net, char *string) {
  struct defined_networks *d;
  if (net == NULL((void*)0))
1
Assuming 'net' is not equal to NULL→
2
←
Taking false branch→
return 0;
  if (strlen(string) > FSM_NAME_LEN40) {
3
←
Assuming the condition is false→
4
←
Taking false branch→
    return(-1);
  }

  fsm_count(net);
  for (d = def; d != NULL((void*)0); d = d->next) {
5
←
Assuming 'd' is equal to NULL→
6
←
Loop condition is false. Execution continues on line 149→
if (d->name != NULL((void*)0) && strcmp(d->name, string) == 0) {
   fsm_destroy(d->net);
   free(d->name);
   d->net = net;
   d->name = strdup(string);
   return 1;
}
  }
  if (def->name == NULL((void*)0)) {
7
←
Access to field 'name' results in a dereference of a null pointer (loaded from variable 'def')
d = def;
  } else {
d = malloc(sizeof(struct defined_networks));
d->next = def->next;
def->next = d;
  }
  d->name = strdup(string);
  d->net = net;
  return 0;
159}