CodeSonar : Pvm : Buffer Overrun

Pvm : Pvm analysis 1 : Buffer Overrun at lpvmgen.c:3120

Categories:	LANG.MEM.BO CWE:120 CWE:121 CWE:122 CWE:126
Warning ID:	2800.2860
Procedure:	pvmgetenvars
Trace:	View
Modified:	Wed Sep 2 12:47:28 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/u1/paul/SATE/2010/c/pvm/pvm3/src/lpvmgen.c

			Enter pvmgetenvars

pvmgetenvars(ep)

char ***ep;

{

char **xpl; /* vars to export */

3102

int mxpl; /* cur length of xpl */

3103

int nxpl; /* num vars found */

char buf[200];

char *p, *q;

int n;

if (p = getenv("PVM_EXPORT")) {

3109

mxpl = 5;

3110

xpl = TALLOC(mxpl, char *, "env");

3111

xpl[0] = p - 11; /* Null Pointer Dereference (ID: 2803.2863) */

nxpl = 1;

while (1) {

while (*p == ':')

p++;

if (!*p)

break;

n = (q = CINDEX(p, ':')) ? q - p : strlen(p);

3119

strncpy(buf, p, n); /* Buffer Overrun (ID: 2801.2861) */ /* strncpy Does Not Null-terminate (ID: 2802.2862) */

n > 199

3120

buf[n] = 0; /* Buffer Overrun */

Preconditions

((char*)&$heap_186429)[1] != 0
((char*)&$heap_186429)[1] != 58
$input_12 >= 2

Postconditions

buf[0]' = ((char*)&$heap_186429)[1]
strlen(&buf[0])' != $input_12 - 2
ep' = $param_1
$heap_186429' = 58
bytes_after(&$heap_186429)' = $input_12 + 1
$heap_186429' is allocated by malloc
bytes_before(&$heap_186429)' = 0
strlen(&$heap_186429)' = $input_12
$heap_186430' = &$heap_186429 - 11
bytes_after(&$heap_186430)' = 40
$heap_186430' is allocated by malloc
$heap_186430' is allocated
bytes_before(&$heap_186430)' = 0
mxpl' = 5
n' = $input_12 - 1
nxpl' = 1
p' = &$heap_186429 + 1
q' = 0
xpl' = &$heap_186430

Change Warning 2800.2860 : Buffer Overrun

Priority:
State:
Finding:
Owner:
Note: