CVE-2023-39070

An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.

An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.

An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.

This update for cppcheck fixes the following issues:

• CVE-2023-39070: Fixed heap use-after-free in removeContradiction() (boo#1215233)

• update to 2.12.1:

  • Support importing projects with project-name

• update to 2.12.0:

  • uselessOverride finds overriding functions that either duplicate code from or delegate back to the base class implementation
  • knownPointerToBool finds pointer to bool conversions that are always true or false
  • truncLongCastAssignment and truncLongCastReturn check additional types, including float/double/long double
  • duplInheritedMember also reports duplicated member functions
  • constParameter*/constVariable* checks find more instances of pointers/references that can be const, e.g. when calling library functions
  • Write how many checkers was activated after a run
  • Added --checkers-report that can be used to generate a report in a file that shows what checkers was activated and disabled
  • The qmake build system has been deprecated and will be removed in a future version.
  • Command-line option '--template

• update to 2.11:

  • pop_back on empty container is UB
  • Improve useStlAlgorithm check to handle many more conditions in the loop for any_of, all_of and none_of algorithms
  • ValueFlow can evaluate the return value of functions even when conditionals are used
  • ValueFlow will now forward the container sizes being returned from a function
  • ValueFlow can infer possible values from possible symbolic values
  • Improve valueflow after pushing to container
  • The new option --check-level= has been added that controls how much checking is made by Cppcheck. The default checking level is 'normal'. If you feel that you can wait longer on results you can use --check-level=exhaustive.
  • It is no longer necessary to run '--check-config' to get detailed 'missingInclude' and 'missingIncludeSystem' messages. They will always be issued in the regular analysis if 'missingInclude' is enabled.
  • 'missingInclude' and 'missingIncludeSystem' are reported with '-j' is > 1 and processes are used in the backend (default in non-Windows binaries)
  • 'missingInclude' and 'missingIncludeSystem' will now cause the '--error-exitcode' to be applied
  • '--enable=information' will no longer implicitly enable 'missingInclude' starting with 2.16. Please enable it explicitly if you require it.
  • The constParameter and constVariable checks have been split into 3 different IDs based on if the variable is a pointer, a reference, or local. The different IDs will allow users to suppress different const warning based on variable type.
  • constParameter
  • constParameterReference
  • constParameterPointer
  • constVariable
  • constVariableReference
  • constVariablePointer
  • More command-line parameters will now check if the given integer argument is actually valid. Several other internal string-to-integer conversions will now be error checked.
  • scanning projects (with -j1) will now defer the analysis of markup files until the whole code was processed

• update to 2.10.3:

  • SymbolDatabase: Fix handling of function pointer arguments

• update to 2.10.2:

  • GUI: Set proper title for compliance report dialog

  • GUI: Generate compliance report

  • Tokenizer: tweaked simplification of function pointers

  • fix whole program analysis

  • Import Project: Fix problem with define value with space

  • Fix execution of executable addons from GUI

  • fix for windows installer, no other changes

  • Fixes when importing AST from clang

  • comments can be added at end of suppression in suppressions file is similar to GCC. If you want to get warnings in the old

  • Added Cppcheck annotations cppcheck_low(VALUE) and

  • Added API01-C: Avoid laying out strings in memory directly

  • Duplicate expression for condition and assignment: if (x==3) x=3;

  • Patch was…

These are all security issues fixed in the cppcheck-2.12.1-3.1 package on the GA media of openSUSE Tumbleweed.