Fixing the following bugs:

Dynamically allocated decompress_tmp_buff is not freed when returning function on error.
fclose(toast_rel_fp) might be called when toast_rel_fp is NULL, which is an unde...

I tried to fix "if (hashSection->hasho_flag & LH_UNUSED_PAGE)" condition. As LH_UNUSED_PAGE is 0 this condition is always false. As I understand hash index page is ...

Denoscription Dynamic memory, referenced by res, is allocated at phpdbg_utils.c:154 : php-src/sapi/phpdbg/phpdbg_utils.c Lines 146 to 155 in cde956a PHPDBG_API char *phpdbg_resolve_path(const char *p...

Pointer GenTree::gtGetOp1(...), that can have only NULL value, is passed as 1st parameter in call to function LinearScan::BuildUse runtime/src/coreclr/jit/lsraxarch.cpp Lines 211 to 216 in e40b3ab ...

Denoscription There is a check of the variable set for zero in line № 633: php-src/ext/mysqlnd/mysqlnd_result.c Line 633 in cc5a1ba if (!set || !row_buffers) { But if set == NULL, we go to line № 737...

There is a division by zero at fu-dump.c:78 : fwupd/libfwupdplugin/fu-dump.c Lines 83 to 87 in 6c4634e if (i > 0 && i != len - 1 && (i + 1) % columns == 0) { g_string_append(str,...

Found by RASU JSC

Denoscription of problem There is always a false condition in the function alloc_code_gen_buffer_splitwx_memfd in the file tcg/region.c. If

Denoscription Pointer init_file is passed to a function free at phpdbg_prompt.c:368 by calling function after the referenced memory was deallocated at phpdbg_prompt.c:333 by passing as first paramete...

libvirt version - 9.3.0 to latest Denoscription of problem In /src/remote/remote_driver.c the macro VIR_FREE(errors[j].disk) used in...

Possibly mismatched call arguments in function unit_find_paths : cached_id_map and cached_name_map systemd/src/systemctl/systemctl-edit.c Line 63 in bab7873 r = unit_find_paths(bus, *name, &lp,...

Dynamic memory, referenced by buf, is allocated at cups-browsed.c:728: cups-filters/utils/cups-browsed.c Line 728 in 8ac453d char *buf = (char*) malloc(sizeof(char)*buffer_size); by calling functio...

Identical expressions on both sides of logical operator: util-linux/sys-utils/wdctl.c Lines 404 to 405 in 4d3079a if (!ctl->set_timeout && !ctl->set_timeout) goto sysfs_only; It looks...

Ever since this function was introduced in 2012 it could've tried filling in an extra interface name. That was made worse in 2019 when the caller functions started accepting NULL...

Bug report Problem Recently I got contacted by a team of static analysis enthusiasts, who analyze CPython's internals for bugs. They have found this: Problematic lines: cpython/Modules/arraymod...

dsa_dump would print a large negative number instead of zero for
segment bin 0. Fix by explicitly checking for underflow and add
special case for bin 0. Backpatch to all supported versions.

Autho...