TMUX XTU Analysis

Detailed analysis results of the TMUX project baseline, XTU

Analyzed project	All Non-CTU Findings (baseline)	All CTU Findings	New CTU findings	Disappeared findings	Successfully analyzed	Failed to analyze	Analysis Time (baseline)[s]	Analysis Time XTU (1st Phase + 2nd Phase)[s]	Median of bug path length (BPL) in baseline	Median of BPL CTU	Median of BPL of new findings	Median of BPL of disappeared findings
tmux	66	139	29	1	133 files	0 files	56	4.75+95	23	28	17	14.5

New findings:

------------------- Bugs grouped by checker ------------------
--------------------------------
Checker ID               | Count
--------------------------------
core.NonNullParamChecker | 4    
core.NullDereference     | 29   
unix.API                 | 1    
unix.Malloc              | 23   
--------------------------------


------------------- Metrics ------------------
Total # of bugs:             57
MIN BugPath length:          2
MAX BugPath length:          108
Mean length:                 34.6140350877

 %:      25% percentile: 15.0
 %:      50% percentile: 28.0
 %:      75% percentile: 45.0
 %:      90% percentile: 87.0

Disappeared findings:

------------------- Bugs grouped by checker ------------------
----------------------------
Checker ID           | Count
----------------------------
core.NullDereference | 2    
----------------------------

☑️

TRUE positives

1. core.NonNullParamChecker http://cc.inf.elte.hu:8080/#baseline=191&newcheck=192&report=19688

• cmd_copy_argv(argc, argv) contains a branch based on whether an argument is null or not.
• Thus, here, it could be, that an argument is NULL and we len it.
• (But this is a hard to decide case, as "logic dictates" that the passed arguments does exist and not null strings.)

2. unix.Malloc Potential memory leak: http://cc.inf.elte.hu:8080/#baseline=191&newcheck=192&report=19627
3. unix.Malloc Potential memory leak: http://cc.inf.elte.hu:8080/#baseline=191&newcheck=192&report=19571 and http://cc.inf.elte.hu:8080/#baseline=191&newcheck=192&report=19641 and http://cc.inf.elte.hu:8080/#baseline=191&newcheck=192&report=19640

❎

None?