Uploaded image for project: 'TEST Defect Tracking Project'
  1. TEST Defect Tracking Project
  2. TEST-1283

Using Uninitialized Value "Adjustment".

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      Title: Using Uninitialized Value "Adjustment".

      Defect Dojo link: https://redhat-prodsec.cloud.defectdojo.com/finding/3948 (3948)

      Severity: High

      Due Date: May 21, 2022

      CWE: CWE-457

      CVE: Unknown

      Product/Engagement/Test: erattadiffbuild/adwaita-qt / erattadiffbuild/adwaita-qt-1.4.1-2.el9 / OSH-SCAN (csmock Scan (SARIF))

      Source File: adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp

      Source Line: 1156

      Description:
      *Result message:* Using uninitialized value "adjustment".
      *Snippet:*
      ```Problem detected in this context:
      1154| switch (corners) {
      1155| case CornersTop:
      1156|> options.painter()>drawLine(frameRect.left() + adjustment, frameRect.bottom(), frameRect.right() - adjustment, frameRect.bottom());
      1157| break;
      1158| case CornersBottom:```
      *Code flow:*
      1. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1127
      Condition "!options->painter()", taking false branch.
      2. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1136
      Declaring variable "adjustment" without initializer.
      3. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1139
      Condition "QColor(options->outlineColor()).isValid()", taking false branch.
      4. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1148
      Condition "!renderFrame", taking false branch.
      5. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1154
      Switch case value "Adwaita::CornersTop".
      6. adwaita-qt-1.4.1/src/lib/adwaitarenderer.cpp:L1156
      Using uninitialized value "adjustment".

      References:
      https://cwe.mitre.org/data/definitions/457.html

      Reporter: Scan Results Collector SA (scan-results-collector-importer-sa) ()

              Unassigned Unassigned
              defectdojo-prodsec Defect Dojo (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: