Remaining problems after compiz.fix1030473-part1 and compiz.fix1030473-part2 branches have been merged with lp:compiz: [../compiz/compizconfig/gconf/src/gconf.c:479]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/compizconfig/gconf/src/gconf.c:1930]: (error) Memory pointed to by 'pathName' is freed twice. [../compiz/compizconfig/gsettings/gsettings_backend_shared/gsettings_util.c:184]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/compizconfig/gsettings/src/gsettings.c:296]: (warning) Casting between double* and float* which have an incompatible binary data representation [../compiz/compizconfig/libcompizconfig/backend/src/ini.c:686]: (error) Memory pointed to by 'filePath' is freed twice. [../compiz/compizconfig/libcompizconfig/backend/src/ini.c:187]: (error) Common realloc mistake: 'privData' nulled but not freed upon failure [../compiz/compizconfig/libcompizconfig/backend/src/ini.c:221]: (error) Common realloc mistake: 'privData' nulled but not freed upon failure [../compiz/compizconfig/libcompizconfig/src/bindings.c:380]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/compizconfig/libcompizconfig/src/compiz.cpp:3039]: (warning) sscanf %s in format string (no. 1) does not specify a width, use %1023s to prevent overflowing destination: name[1024] [../compiz/compizconfig/libcompizconfig/src/compiz.cpp:3039]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/compizconfig/libcompizconfig/src/compiz.cpp:2705]: (error) Memory leak: pbFile [../compiz/compizconfig/libcompizconfig/src/compiz.cpp:2771]: (error) Memory leak: pbFile [../compiz/compizconfig/libcompizconfig/src/filewatch.c:113]: (error) Common realloc mistake: 'fwData' nulled but not freed upon failure [../compiz/compizconfig/libcompizconfig/src/filewatch.c:173]: (error) Common realloc mistake: 'fwData' nulled but not freed upon failure [../compiz/compizconfig/libcompizconfig/src/ini.c:791]: (error) Common realloc mistake: 'stringBuffer' nulled but not freed upon failure [../compiz/compizconfig/libcompizconfig/src/main.c:656]: (error) Possible null pointer dereference: subGroup - otherwise it is redundant to check if subGroup is null at line 657 [../compiz/compizconfig/libcompizconfig/src/main.c:3213]: (error) Possible null pointer dereference: conflict - otherwise it is redundant to check if conflict is null at line 3214 [../compiz/compizconfig/libcompizconfig/src/main.c:4305]: (error) Read and write operations without a call to a positioning function (fseek, fsetpos or rewind) or fflush inbetween result in undefined behaviour. [../compiz/compizconfig/libcompizconfig/src/main.c:259]: (error) Memory pointed to by 'val' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:267]: (error) Memory pointed to by 'val' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:275]: (error) Memory pointed to by 'val' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:1037]: (error) Memory pointed to by 'dlname' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:3485]: (error) Memory pointed to by 'backenddir' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:3495]: (error) Memory pointed to by 'backenddir' is freed twice. [../compiz/compizconfig/libcompizconfig/src/main.c:3626]: (error) Memory leak: sectionName [../compiz/compizconfig/libcompizconfig/src/main.c:3784]: (error) Memory leak: sectionName [../compiz/compizconfig/libcompizconfig/src/main.c:4262]: (error) Memory leak: completedUpgrades [../compiz/compizconfig/libcompizconfig/src/main.c:4266]: (error) Memory leak: completedUpgrades [../compiz/compizconfig/libcompizconfig/src/main.c:4262]: (error) Resource leak: completedUpgrades [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:94]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:100]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:106]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:112]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:118]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:124]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:130]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:136]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:142]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:148]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:154]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:160]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:166]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:172]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:178]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:187]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:196]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:205]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:211]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:217]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:223]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:232]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:241]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:250]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:259]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:265]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:271]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:280]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:289]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:295]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:304]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:313]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:322]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-context.h:331]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/context-mock.cpp:68]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:64]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:69]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:74]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:79]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:84]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:89]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:94]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:99]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:104]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:109]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:114]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:119]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:124]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:129]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:134]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:139]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:148]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:154]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-plugin.h:159]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/plugin-mock.cpp:55]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:119]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:125]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:131]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:137]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:143]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:149]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:155]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:161]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:167]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:173]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:179]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:186]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:193]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:200]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:207]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:214]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:221]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:228]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:235]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:242]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:249]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:256]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:263]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:268]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:273]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:278]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:283]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:289]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:294]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:299]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:304]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:309]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:314]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:319]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:324]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:329]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:334]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:339]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:344]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/mock-setting.h:349]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/setting-mock.cpp:77]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:86]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:100]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:120]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:129]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:146]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:180]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:192]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:299]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-ccs-object.cpp:327]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-context.cpp:19]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-plugin.cpp:19]: (style) C-style pointer casting [../compiz/compizconfig/libcompizconfig/tests/test-setting.cpp:19]: (style) C-style pointer casting [../compiz/gtk/window-decorator/cairo.c:732] -> [../compiz/gtk/window-decorator/cairo.c:732]: (style) Finding the same expression on both sides of an operator is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct. [../compiz/gtk/window-decorator/decorator.c:1016]: (error) Memory leak: opts [../compiz/gtk/window-decorator/frames.c:266]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:269]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:272]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:275]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:278]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:281]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:284]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:287]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:290]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/frames.c:293]: (error) Possible null pointer dereference: frame - otherwise it is redundant to check if frame is null at line 296 [../compiz/gtk/window-decorator/metacity.c:599]: (style) Variable 'frame_style' is assigned a value that is never used [../compiz/kde/window-decorator-kde4/switcher.cpp:227]: (style) Variable 'frameType' is assigned a value that is never used [../compiz/kde/window-decorator-kde4/switcher.cpp:227]: (style) Variable 'frameState' is assigned a value that is never used [../compiz/kde/window-decorator-kde4/switcher.cpp:227]: (style) Variable 'frameActions' is assigned a value that is never used [../compiz/libdecoration/decoration.c:3140]: (style) The scope of the variable 'icccm_version' can be reduced. Warning: It can be unsafe to fix this message. Be careful. Especially when there are inner loops. Here is an example where cppcheck will write that the scope for 'i' can be reduced: void f(int x) { int i = 0; if (x) { // it's safe to move 'int i = 0' here for (int n = 0; n < 10; ++n) { // it is possible but not safe to move 'int i = 0' here do_something(&i); } } } When you see this message it is always safe to reduce the variable scope 1 level. [../compiz/plugins/animation/src/glide.cpp:41]: (warning) Member variable 'GlideAnim::glideModRotAngle' is not initialized in the constructor. [../compiz/plugins/animation/src/magiclamp.cpp:55]: (warning) Member variable 'MagicLampAnim::mTopLeftCornerObject' is not initialized in the constructor. [../compiz/plugins/animation/src/magiclamp.cpp:55]: (warning) Member variable 'MagicLampAnim::mBottomLeftCornerObject' is not initialized in the constructor. [../compiz/plugins/animation/src/options.cpp:127]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/animation/src/options.cpp:169]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/animation/src/options.cpp:224]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/animation/src/options.cpp:231]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/animation/src/options.cpp:247]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/animationaddon/src/airplane.cpp:127]: (style) C-style pointer casting [../compiz/plugins/animationaddon/src/airplane.cpp:348]: (style) C-style pointer casting [../compiz/plugins/animationaddon/src/airplane.cpp:533]: (style) C-style pointer casting [../compiz/plugins/animationaddon/src/airplane.cpp:697]: (style) C-style pointer casting [../compiz/plugins/animationaddon/src/airplane.cpp:747]: (style) C-style pointer casting [../compiz/plugins/animationaddon/src/private.h:41]: (warning) Member variable 'ExtensionPluginAnimAddon::mOutput' is not initialized in the constructor. [../compiz/plugins/animationaddon/src/polygon.cpp:459]: (style) Suspicious calculation. Please use parentheses to clarify the code. The code 'a%b?c:d' should be written as either '(a%b)?c:d' or 'a%(b?c:d)'. [../compiz/plugins/colorfilter/src/colorfilter.cpp:252]: (error) Possible null pointer dereference: func - otherwise it is redundant to check if func is null at line 255 [../compiz/plugins/colorfilter/src/parser.h:34]: (style) The class 'FragmentParser 'does not have a constructor but it has attributes. The attributes are not initialized which may cause bugs or undefined behavior. [../compiz/plugins/colorfilter/src/parser.cpp:177]: (style) Suspicious condition (assignment+comparison), it can be clarified with parentheses [../compiz/plugins/colorfilter/src/parser.cpp:178]: (style) Suspicious condition (assignment+comparison), it can be clarified with parentheses [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::compositeEvent' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::compositeError' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::compositeOpcode' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::damageEvent' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::damageError' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::fixesEvent' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::fixesError' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::fixesVersion' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::shapeExtension' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::shapeEvent' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::shapeError' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::randrExtension' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::randrEvent' is not initialized in the constructor. [../compiz/plugins/composite/src/screen.cpp:276]: (warning) Member variable 'PrivateCompositeScreen::randrError' is not initialized in the constructor. [../compiz/plugins/decor/src/decor.cpp:581]: (warning) Member variable 'Decoration::refCount' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:1794]: (warning) Member variable 'CursorTexture::screen' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:1794]: (warning) Member variable 'CursorTexture::width' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:1794]: (warning) Member variable 'CursorTexture::height' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:1794]: (warning) Member variable 'CursorTexture::hotX' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:1794]: (warning) Member variable 'CursorTexture::hotY' is not initialized in the constructor. [../compiz/plugins/ezoom/src/ezoom.cpp:213]: (warning) Member variable 'ZoomArea::output' is not initialized in the constructor. [../compiz/plugins/firepaint/src/firepaint.cpp:52]: (warning) Member variable 'ParticleSystem::x' is not initialized in the constructor. [../compiz/plugins/firepaint/src/firepaint.cpp:52]: (warning) Member variable 'ParticleSystem::y' is not initialized in the constructor. [../compiz/plugins/firepaint/src/firepaint.cpp:57]: (warning) Member variable 'ParticleSystem::x' is not initialized in the constructor. [../compiz/plugins/firepaint/src/firepaint.cpp:57]: (warning) Member variable 'ParticleSystem::y' is not initialized in the constructor. [../compiz/plugins/grid/src/grid.h:56]: (warning) Member variable 'GridProps::gravityRight' is not initialized in the constructor. [../compiz/plugins/grid/src/grid.h:56]: (warning) Member variable 'GridProps::gravityDown' is not initialized in the constructor. [../compiz/plugins/grid/src/grid.h:56]: (warning) Member variable 'GridProps::numCellsX' is not initialized in the constructor. [../compiz/plugins/grid/src/grid.h:56]: (warning) Member variable 'GridProps::numCellsY' is not initialized in the constructor. [../compiz/plugins/group/src/init.cpp:140]: (error) Uninitialized variable: group [../compiz/plugins/group/src/init.cpp:141]: (error) Uninitialized variable: group [../compiz/plugins/group/src/tab.cpp:2946]: (warning) Member variable 'GroupTabBar::mNextDirection' is not initialized in the constructor. [../compiz/plugins/opengl/src/screen.cpp:659]: (style) The second of the two statements can never be executed, and so should be removed. [../compiz/plugins/place/src/place.cpp:439]: (style) Suspicious expression. Boolean result is used in bitwise operation. The ! operator and the comparison operators have higher precedence than bitwise operators. It is recommended that the expression is clarified with parentheses. [../compiz/plugins/ring/src/ring.cpp:454] -> [../compiz/plugins/ring/src/ring.cpp:452]: (style) Finding the same code for an if branch and an else branch is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct. [../compiz/plugins/screenshot/src/screenshot.cpp:125]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/screenshot/src/screenshot.cpp:203]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/plugins/shift/src/shift.cpp:826]: (error) Common realloc mistake: 'mWindows' nulled but not freed upon failure [../compiz/plugins/shift/src/shift.cpp:836]: (error) Common realloc mistake: 'mDrawSlots' nulled but not freed upon failure [../compiz/plugins/showmouse/src/showmouse.cpp:57]: (warning) Member variable 'ParticleSystem::x' is not initialized in the constructor. [../compiz/plugins/showmouse/src/showmouse.cpp:57]: (warning) Member variable 'ParticleSystem::y' is not initialized in the constructor. [../compiz/plugins/showmouse/src/showmouse.cpp:62]: (warning) Member variable 'ParticleSystem::x' is not initialized in the constructor. [../compiz/plugins/showmouse/src/showmouse.cpp:62]: (warning) Member variable 'ParticleSystem::y' is not initialized in the constructor. [../compiz/plugins/stackswitch/src/stackswitch.cpp:619]: (error) Common realloc mistake: 'mWindows' nulled but not freed upon failure [../compiz/plugins/stackswitch/src/stackswitch.cpp:624]: (error) Common realloc mistake: 'mDrawSlots' nulled but not freed upon failure [../compiz/plugins/staticswitcher/src/staticswitcher.cpp:1249]: (warning) Member variable 'StaticSwitchScreen::previewWidth' is not initialized in the constructor. [../compiz/plugins/staticswitcher/src/staticswitcher.cpp:1249]: (warning) Member variable 'StaticSwitchScreen::previewHeight' is not initialized in the constructor. [../compiz/plugins/staticswitcher/src/staticswitcher.cpp:1249]: (warning) Member variable 'StaticSwitchScreen::previewBorder' is not initialized in the constructor. [../compiz/plugins/staticswitcher/src/staticswitcher.cpp:1249]: (warning) Member variable 'StaticSwitchScreen::xCount' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::radius' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::rMod' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::duration' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::timer' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::width' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::height' is not initialized in the constructor. [../compiz/plugins/trip/src/trip.cpp:560]: (warning) Member variable 'Ripple::adjust' is not initialized in the constructor. [../compiz/plugins/wobbly/src/wobbly.cpp:891]: (warning) Member variable 'Model::springs' is not initialized in the constructor. [../compiz/src/action.cpp:292]: (warning) scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier: %s => %20s %i => %3i Sample program that can crash: #include int main() { int a; scanf("%i", &a); return 0; } To make it crash: perl -e 'print "5"x2100000' | ./a.out [../compiz/src/screen.cpp:2278]: (style) C-style pointer casting [../compiz/src/screen.cpp:1091]: (error) BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container. [../compiz/src/stackdebugger.cpp:51]: (warning) Member variable 'StackDebugger::mTimeoutRequired' is not initialized in the constructor. [../compiz/src/string/tests/printf/src/test-string-printf.cpp:52]: (warning) Member variable 'Value::v' is not initialized in the constructor. [../compiz/src/window.cpp:2005]: (error) Analysis failed. If the code is valid then please report this failure.