Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at pvmd.c:5191

Categories: LANG.MEM.NPD CWE:476
Warning ID: 139.28760
Procedure: colonsep
Trace: view
Modified: Thu Nov 26 11:27:45 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away
Legend
Warning Location Contributes Parse Error
Other Warning Two or More Loop Iterations On Execution Path
Comment Macro Preprocessor
Include Keyword Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/src/pvmd.c
   Enter colonsep
 5167 char ** 
 5168 colonsep(s) 
 5169         char *s;        /* the string to break up */ 
 5170 {
 5171         char **els;
 5172         int nel = 2;                    /* length of els */ 
 5173         char *p, *q;
 5174  
 5175 #if defined (IMA_OS2) || defined (WIN32) 
 5176         for (p = s; p = CINDEX(p, ';'); p++) 
 5177 #else 
 5178         for (p = s; p = CINDEX(p, ':'); p++)
 5179 #endif 
 5180                 nel++;
true5181         els = TALLOC(nel, char*, "path");   /* Integer Overflow of Allocation Size (ID: 140.28761) */
 5182  
 5183         nel = 0;
 5184         for (p = s; p; p = q) {
 5185 #if defined (IMA_OS2) || defined (WIN32) 
 5186                 if (q = CINDEX(p, ';')) 
 5187 #else 
 5188                 if (q = CINDEX(p, ':'))
 5189 #endif 
 5190                         *q++ = 0;
els <= 40955191                 els[nel++] = p;     /* Null Pointer Dereference */
Preconditions 
*s != 58
Postconditions 
$unknown_456953' = 0
strlen(&$unknown_456953)' = 0
els' = 0
errno' != 0
nel' = 1
p' = s
q' = &$unknown_456953 + 1



Change Warning 139.28760 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: