TMUX XTU Analysis

Detailed analysis results of the TMUX project baseline, XTU

Bug numbers do not match those on the linked viewer. The reason behind this is that we used bug deduplication not yet committed into the CodeChecker codebase.

Analyzed project	All Non-CTU Findings (baseline)	All CTU Findings	New CTU findings	Disappeared findings	Successfully analyzed	Failed to analyze	Analysis Time (baseline)[s]	Analysis Time XTU (1st Phase + 2nd Phase)[s]	Median of bug path length (BPL) in baseline	Median of BPL CTU	Median of BPL of new findings	Median of BPL of disappeared findings
tmux	66	139	29	1	133 files	0 files	56	4.75+95	23	28	17	14.5

New findings:

------------------- Bugs grouped by checker ------------------
--------------------------------
Checker ID               | Count
--------------------------------
core.NonNullParamChecker | 4    
core.NullDereference     | 29   
unix.API                 | 1    
unix.Malloc              | 23   
--------------------------------


------------------- Metrics ------------------
Total # of bugs:             57
MIN BugPath length:          2
MAX BugPath length:          108
Mean length:                 34.6140350877

 %:      25% percentile: 15.0
 %:      50% percentile: 28.0
 %:      75% percentile: 45.0
 %:      90% percentile: 87.0

☑️

1. core.NonNullParamChecker http://cc.elte.hu:8080/#baseline=95&newcheck=96&report=10008

• cmd_copy_argv(argc, argv) contains a branch based on whether an argument is null or not.
• Thus, here, it could be, that an argument is NULL and we len it.
• (But this is a hard to decide case, as "logic dictates" that the passed arguments does exist and not null strings.)

2. unix.Malloc Potential memory leak: http://cc.elte.hu:8080/#baseline=95&newcheck=96&report=9982
3. unix.Malloc Potential memory leak: http://cc.elte.hu:8080/#baseline=95&newcheck=96&report=10053 and http://cc.elte.hu:8080/#baseline=95&newcheck=96&report=10054 and http://cc.elte.hu:8080/#baseline=95&newcheck=96&report=10044

❎

None?