CodeSonar : Pvm : Null Pointer Dereference

Pvm : Pvm analysis 1 : Null Pointer Dereference at pvmd.c:5225

Categories:	LANG.MEM.NPD CWE:476
Warning ID:	2549.2580
Procedure:	varsub
Trace:	View
Modified:	Wed Sep 2 12:40:55 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/u1/paul/SATE/2010/c/pvm/pvm3/src/pvmd.c

			Enter varsub

char *

varsub(s)

char *s;

{

int rm = 8; /* length of result string space */

5210

char *r; /* result string */

int rl = 0;

char *p;

char *vn, *vv;

char c;

int l;

r = TALLOC(rm, char, "var");

5218

while (*s) { /* Null Pointer Dereference (ID: 2556.2587) */

5219

for (p = s; *p && *p != '$'; p++) ;

if (l = p - s) {

if (rl + l >= rm) {

rm = rl + l + 1;

r = TREALLOC(r, rm, char);

5224

}

$unknown_4381721 <= 4095

5225

strncpy(r + rl, s, l); /* Null Pointer Dereference */

Preconditions

&$unknown_482919 >= $param_1
&$unknown_482920 >= strlen($param_1) + 1
&$unknown_482920 >= 8
*$param_1 != 0
*$param_1 != 36
strlen($param_1) > 0
$unknown_482919 != 0
$unknown_482919 != 36
strlen(&$unknown_482919) = 2
((char*)&$unknown_482919)[2] = 0
((char*)&$unknown_482919)[1] != 0
((char*)&$unknown_482919)[1] != 36

Postconditions

bytes_after(&$heap_32315)' = 8
$heap_32315' is allocated by malloc
$heap_32315' is allocated
bytes_before(&$heap_32315)' = 0
l' = &$unknown_482920
p' = &$unknown_482919 + 2
r' = 0
rl' = 0
rm' = &$unknown_482920 + 1
s' = $param_1

Change Warning 2549.2580 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: