CodeSonar : Pvm : Null Pointer Dereference

Pvm : Pvm analysis 1 : Null Pointer Dereference at tdpro.c:1596

Categories:	LANG.MEM.NPD CWE:476
Warning ID:	2713.2766
Procedure:	tm_task
Trace:	View
Modified:	Wed Sep 2 12:44:14 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/u1/paul/SATE/2010/c/pvm/pvm3/src/tdpro.c

			Enter tm_task

tm_task(tp, mp)

struct task *tp;

struct pmsg *mp;

{

int where;

struct pmsg *mp2;

struct waitc *wp;

struct waitc *wp2 = 0; /* master waitc of peer group */

int hh;

struct hostd *hp;

if (upkuint(mp, &where )) {

1560

pvmlogerror("tm_task() bad msg format\n");

return 0;

}

mp = replymessage (mp );

1565

mp->m_dst = tp->t_tid; /* Null Pointer Dereference (ID: 2714.2767) */

1566

mp->m_tag = TM_TASK;

1567

1568

if (where) { /* specific host or task requested */

1569

if (!(hp = tidtohost (hosts, where ))) {

1570

pkint(mp, PvmNoHost );

sendmessage(mp );

return 0;

}

pkint(mp, 0);

wp = wait_new (WT_TASK );

1576

wp->wa_mesg = mp;

1577

wp->wa_tid = tp->t_tid;

1578

wp->wa_on = hp->hd_hostpart;

1579

1580

mp = mesg_new (0);

1581

mp->m_tag = DM_TASK; /* Null Pointer Dereference (ID: 2712.2765) */

1582

mp->m_dst = hp->hd_hostpart | TIDPVMD;

1583

mp->m_wid = wp->wa_wid;

pkint(mp, where );

sendmessage(mp );

} else { /* all tasks requested */

1588

pkint(mp, 0);

1589

1590

wp2 = wait_new (WT_TASK );

1591

mp->m_ref++;

1592

wp2->wa_mesg = mp;

1593

wp2->wa_tid = tp->t_tid;

mp2 = mesg_new (0);

mp2->m_tag = DM_TASK; /* Null Pointer Dereference */

Preconditions

numfrags = 0
numpmsgs = 1
widrange >= lastwid + 1

Postconditions

freepmsgs.m_link->m_link->m_rlink' = freepmsgs.m_link->m_rlink
waitlist->wa_rlink' = &$heap_161335
freepmsgs.m_link->m_rlink->m_link' = freepmsgs.m_link->m_link
waitlist->wa_rlink->wa_link' = &$heap_161335
$unknown_1006032' = &freefrags.fr_link
((char*)&$unknown_1006032)[8]' = ((char*)&$unknown_1006033)[8]
freefrags.fr_link' = &$unknown_1006032 - 64
freefrags.fr_rlink' = &$unknown_1006032
freepmsgs.m_link' = &freepmsgs.m_link
freepmsgs.m_rlink' = &freepmsgs.m_link
$heap_161335' = waitlist
bytes_after(&$heap_161335)' = 80
$heap_161335' is allocated by malloc
$heap_161335' is allocated
bytes_before(&$heap_161335)' = 0
((char*)&$heap_161335)[16]' <= waitlist->wa_wid - 1
((char*)&$heap_161335)[20]' = 4
((char*)&$heap_161335)[24]' = 0
((char*)&$heap_161335)[28]' = ((char*)$param_1)[32]
((char*)&$heap_161335)[32]' = 0
((char*)&$heap_161335)[56]' = freepmsgs.m_link
((char*)&$heap_161335)[64]' = 0
((char*)&$heap_161335)[72]' = 0
((char*)&$heap_161335)[8]' = waitlist->wa_rlink
lastwid' = lastwid + 1
mp' = freepmsgs.m_link
mp2' = 0
numfrags' = 499
numpmsgs' = numpmsgs - 1
tp' = $param_1
where' = 0
wp2' = &$heap_161335

Change Warning 2713.2766 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: