| Group | Type | File | Path Length | Description | |
| Memory error | Use of zero allocated | /desktop/save_text.c | 34 | Use of memory allocated with size zero | Details |
| Unused code | Dead assignment | /desktop/treeview.c | 2 | Value stored to 'redraw' is never read | Details |
| Logic error | Function call with invalid argument | /utils/file.c | 11 | The 1st argument to 'fstatat' is between -99 and -1 but should be a valid file descriptor or AT_FDCWD | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 17 | The left operand of '!=' is a garbage value | Details |
| Logic error | Assigned value is garbage or undefined | /desktop/treeview.c | 40 | The left expression of the compound assignment is an uninitialized value. The computed value will also be garbage | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 26 | The left operand of '!=' is a garbage value | Details |
| Logic error | Assigned value is garbage or undefined | /frontends/gtk/resources.c | 14 | Assigned value is garbage or undefined | Details |
| Memory error | Use-after-free | /desktop/treeview.c | 53 | Use of memory after it is freed | Details |
| Unused code | Dead assignment | /content/handlers/html/form.c | 2 | Value stored to 'err' is never read | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/dom_token_list.c | 2 | Value stored to 'exc' is never read | Details |
| Unused code | Dead assignment | /desktop/cookie_manager.c | 2 | Value stored to 'err' is never read | Details |
| Stream handling error | Stream already in EOF | /content/urldb.c | 26 | Read function called when stream is in EOF state. Function has no effect | Details |
| Unused code | Dead initialization | /frontends/monkey/browser.c | 2 | Value stored to 'ptr_name' during its initialization is never read | Details |
| Memory error | Memory leak | /frontends/gtk/download.c | 21 | Potential leak of memory pointed to by 'destination' | Details |
| Unused code | Dead nested assignment | /frontends/monkey/dispatch.c | 2 | Although the value stored to 'r' is used in the enclosing expression, the value is never actually read from 'r' | Details |
| Logic error | Function call with invalid argument | /utils/file.c | 14 | The 1st argument to 'unlinkat' is between -99 and -1 but should be a valid file descriptor or AT_FDCWD | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 23 | The left operand of '!=' is a garbage value | Details |
| Logic error | Dereference of null pointer | /content/handlers/html/layout_internal.h | 41 | Access to field 'style' results in a dereference of a null pointer (loaded from variable 'b') | Details |
| Unused code | Dead nested assignment | /content/fetchers/about/chart.c | 2 | Although the value stored to 'vallen' is used in the enclosing expression, the value is never actually read from 'vallen' | Details |
| Unused code | Dead assignment | /content/fetchers/about/chart.c | 2 | Value stored to 'kvlen' is never read | Details |
| Unused code | Dead initialization | /frontends/monkey/browser.c | 2 | Value stored to 'state' during its initialization is never read | Details |
| Unused code | Dead assignment | /content/handlers/html/table.c | 2 | Value stored to 'a_src' is never read | Details |
| Unused code | Dead assignment | /utils/ssl_certs.c | 2 | Value stored to 'kvlen' is never read | Details |
| Unix API | Allocator sizeof operand mismatch | /content/fs_backing_store.c | 2 | Result of 'malloc' is converted to a pointer of type 'struct store_entry *', which is incompatible with sizeof operand type 'struct state_entry *' | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 34 | The left operand of '!=' is a garbage value | Details |
| Unused code | Dead assignment | /desktop/browser_window.c | 2 | Value stored to 'res' is never read | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/dom_token_list.c | 2 | Value stored to 'exc' is never read | Details |
| Logic error | Dereference of null pointer | /content/handlers/html/box_construct.c | 35 | Access to field 'type' results in a dereference of a null pointer (loaded from field 'containing_block') | Details |
| Unused code | Dead increment | /desktop/treeview.c | 2 | Value stored to 'pos' is never read | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 26 | The left operand of '!=' is a garbage value | Details |
| Unused code | Dead assignment | /content/handlers/html/table.c | 2 | Value stored to 'a_src' is never read | Details |
| Logic error | Function call with invalid argument | /utils/filename.c | 19 | The 1st argument to 'fstatat' is between -99 and -1 but should be a valid file descriptor or AT_FDCWD | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/dom_token_list.c | 2 | Value stored to 'exc' is never read | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 21 | The left operand of '!=' is a garbage value | Details |
| Logic error | Dereference of null pointer | /content/handlers/html/table.c | 12 | Access to field 'parent' results in a dereference of a null pointer (loaded from variable 'row') | Details |
| Logic error | Function call with invalid argument | /utils/filename.c | 28 | The 1st argument to 'unlinkat' is between -99 and -1 but should be a valid file descriptor or AT_FDCWD | Details |
| Memory error | Use-after-free | /content/handlers/javascript/duktape/dukky.c | 56 | Use of memory after it is freed | Details |
| Logic error | Dereference of null pointer | /content/handlers/html/layout_flex.c | 50 | Access to field 'height' results in a dereference of a null pointer (loaded from variable 'b') | Details |
| Logic error | Uninitialized argument value | /content/fetchers/about/websearch.c | 12 | 1st function call argument is an uninitialized value | Details |
| Unused code | Dead assignment | /content/handlers/image/rsvg246.c | 2 | Value stored to 'renderres' is never read | Details |
| Unused code | Dead assignment | /frontends/framebuffer/gui.c | 2 | Value stored to 'widget' is never read | Details |
| Logic error | Result of operation is garbage or undefined | /content/handlers/html/box_inspect.c | 13 | The right operand of '-' is a garbage value | Details |
| Logic error | Dereference of null pointer | /content/urldb.c | 35 | Access to field 'children' results in a dereference of a null pointer (loaded from variable 'p') | Details |
| Unused code | Dead assignment | /frontends/framebuffer/fbtk/osk.c | 2 | Value stored to 'widget' is never read | Details |
| Logic error | Result of operation is garbage or undefined | /content/handlers/text/textplain.c | 19 | The left operand of '==' is a garbage value | Details |
| Logic error | Uninitialized argument value | /content/handlers/html/html.c | 46 | 1st function call argument is an uninitialized value | Details |
| Memory error | Use-after-free | /frontends/framebuffer/fbtk/fbtk.c | 17 | Use of memory after it is freed | Details |
| Unused code | Dead nested assignment | /frontends/monkey/dispatch.c | 2 | Although the value stored to 'r' is used in the enclosing expression, the value is never actually read from 'r' | Details |
| Unused code | Dead nested assignment | /content/fetchers/about/chart.c | 2 | Although the value stored to 'vallen' is used in the enclosing expression, the value is never actually read from 'vallen' | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 18 | The left operand of '!=' is a garbage value | Details |
| Unused code | Dead assignment | /content/textsearch.c | 2 | Value stored to 'type' is never read | Details |
| Memory error | Use-after-free | /content/handlers/javascript/duktape/dukky.c | 44 | Use of memory after it is freed | Details |
| Stream handling error | Invalid stream state | /utils/libdom.c | 11 | File position of the stream might be 'indeterminate' after a failed operation. Can cause undefined behavior | Details |
| Logic error | Division by zero | /content/handlers/html/layout.c | 37 | Division by zero | Details |
| Unused code | Dead assignment | /content/handlers/html/form.c | 2 | Value stored to 'err' is never read | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/dom_token_list.c | 2 | Value stored to 'exc' is never read | Details |
| Stream handling error | Invalid stream state | /content/urldb.c | 26 | File position of the stream might be 'indeterminate' after a failed operation. Can cause undefined behavior | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/node.c | 2 | Value stored to 'exc' is never read | Details |
| Unused code | Dead assignment | /desktop/global_history.c | 2 | Value stored to 'err' is never read | Details |
| Logic error | Result of operation is garbage or undefined | /frontends/gtk/menu.c | 18 | The left operand of '!=' is a garbage value | Details |
| Unused code | Dead assignment | /build/Linux-framebuffer/duktape/dom_settable_token_list.c | 2 | Value stored to 'exc' is never read | Details |
| Memory error | Use-after-free | /content/handlers/image/image_cache.c | 14 | Use of memory after it is freed | Details |
| Unused code | Dead assignment | /content/fetchers/about/websearch.c | 2 | Value stored to 'kvlen' is never read | Details |
Help us localize this page