Reproducing code example:

Static analysis results, no POC.
This static analysis report has been manually verified as a real bug and still exists in the latest version.

Error message:

The path provided by the static analyzer is as follows.

1. A new reference is returned from PyTuple_New and pointed to by ret.
   

   numpy/numpy/core/src/multiarray/scalartypes.c.src

   Line 1733 in e49478c

   ret = PyTuple_New(2);

2. Assume ret is not NULL.
   

   numpy/numpy/core/src/multiarray/scalartypes.c.src

   Line 1734 in e49478c

   if (ret == NULL) {

3. Call function PyImport_ImportModule, assign return value to mod.
   

   numpy/numpy/core/src/multiarray/scalartypes.c.src

   Line 1754 in e49478c

   mod = PyImport_ImportModule("numpy.core._multiarray_umath");

4. Assume mod is NULL,
   

   numpy/numpy/core/src/multiarray/scalartypes.c.src

   Line 1755 in e49478c

   if (mod == NULL) {

5. Function returns without decreasing the refcnt of ret.
   

   numpy/numpy/core/src/multiarray/scalartypes.c.src

   Line 1756 in e49478c

   return NULL;

Similarly, other non-decreased returns.

NumPy/Python version information:

Static analysis carried out on commit 04ab04d.

Internal bug report ID: NumPy-3f42e1 (1756), NumPy-be991e (1777)