Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Infer# Analysis #792

Open
kfrancis opened this issue Nov 1, 2022 · 0 comments
Open

Infer# Analysis #792

kfrancis opened this issue Nov 1, 2022 · 0 comments
Labels

Comments

@kfrancis
Copy link

kfrancis commented Nov 1, 2022

Steps to reproduce

  1. Get Infer#
  2. Run it on the code

ZipFile.cs

  • (Pulse resource leak) Resource dynamically allocated by constructor ICSharpCode.SharpZipLib.Encryption.PkzipClassicEncryptCryptoTransform(), indirectly via call to PkzipClassicManaged.CreateEncryptor(...) on line 3740 is not closed after the last access at line 3740, column 5.

75gai-1667327544

  • (Thread safety violation) Read/Write race. Non-private method ZipFile$PartialInputStream.get_Position() reads without synchronization from this.ICSharpCode.SharpZipLib.Zip.ZipFile$PartialInputStream.readPos_. Potentially races with write in method ZipFile$PartialInputStream.Read(...).
    Reporting because another access to the same memory occurs on a background thread, although this access may not.
  • (Thread safety violation) Read/Write race. Non-private method ZipFile$PartialInputStream.ReadByte() reads without synchronization from this.ICSharpCode.SharpZipLib.Zip.ZipFile$PartialInputStream.readPos_. Potentially races with write in method ZipFile$PartialInputStream.Read(...).
    Reporting because this access may occur on a background thread.
  • (Thread safety violation) Unprotected write. Non-private method ZipFile$PartialInputStream.set_Position(...) writes to field this.ICSharpCode.SharpZipLib.Zip.ZipFile$PartialInputStream.readPos_ outside of synchronization.
    Reporting because another access to the same memory occurs on a background thread, although this access may not.

ZipEntry.cs

  • (Pulse resource leak) Resource dynamically allocated by constructor ICSharpCode.SharpZipLib.Zip.ZipExtraData() on line 870 is not closed after the last access at line 938, column 4.

report_sarif.zip

@piksel piksel added the bug label Dec 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants