Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at hoster.c:383

Categories: LANG.MEM.NPD CWE:476
Warning ID: 22042.28703
Procedure: hoster
Trace: view
Modified: Thu Nov 26 11:27:30 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/src/hoster.c
   Enter hoster
 348 hoster(mp) 
 349         struct pmsg *mp;
 350 {
 351         struct pmsg *mp2;
 352         int num;
 353         int i;
 354         struct hst **hostlist;
 355         struct hst *hp;
 356         char *p;
 357  
 358         /*
 359         * unpack the startup message 
 360         */ 
 361  
 362         upkint(mp, &num);
 363         if (pvmdebmask & PDMSTARTUP) {
 364                 pvmlogprintf("hoster() %d to start\n", num);
 365         }
 366         if (num > 0) {
 367                 hostlist = TALLOC(num, struct hst *, "hsts");   /* Integer Overflow of Allocation Size (ID: 104.28706) */
 368                 for (i = 0; i < num; i++) {
 369                         hp = TALLOC(1, struct hst, "hst");
 370                         hostlist[i] = hp;   /* Null Pointer Dereference (ID: 103.28705) */
 371                         hp->h_flag = 0;   /* Null Pointer Dereference (ID: 102.28704) */
 372                         hp->h_result = 0;
 373                         if (upkint(mp, &hp->h_tid) 
 374                         || upkstralloc(mp, &hp->h_sopts) 
 375                         || upkstralloc(mp, &hp->) 
 376                         || upkstralloc(mp, &hp->h_cmd) 
true377                         || upkstralloc(mp, &hp->h_wincmd) 
 378                         || upkstralloc(mp, &hp->h_vmid)) {
 379                                 pvmlogerror("hoster() bad message format\n");
 380                                 pvmbailout(0);
 381                         }
 382                         /* Check for (possible) alternate WIN32 pvmd cmd */ 
hp->h_wincmd <= 4095383                         if (!strcmp(hp->h_wincmd,"")) {     /* Null Pointer Dereference */
Preconditions
&$unknown_272919 >= 1
&$unknown_272921 >= 1
&$unknown_272923 >= 1
&$unknown_272927 >= 1
&$unknown_272929 >= 1
Postconditions
atnewline' = 0
errno' != 0
$heap_12433' = &$heap_12434
bytes_after(&$heap_12433)' = 4 * &$unknown_272919
$heap_12433' is allocated by malloc
$heap_12433' is allocated
bytes_before(&$heap_12433)' = 0
bytes_after(&$heap_12434)' = 36
$heap_12434' is allocated by malloc
bytes_before(&$heap_12434)' = 0
((char*)&$heap_12434)[16]' = 0
((char*)&$heap_12434)[20]' = 0
((char*)&$heap_12434)[24]' = 0
((char*)&$heap_12434)[28]' = &$heap_12437
((char*)&$heap_12434)[32]' = 0
((char*)&$heap_12434)[8]' = &$heap_12436
((char*)&$heap_12434)[12]' = &$heap_12435
bytes_after(&$heap_12435)' = &$unknown_272921
$heap_12435' is allocated by malloc
bytes_before(&$heap_12435)' = 0
bytes_after(&$heap_12436)' = &$unknown_272923
$heap_12436' is allocated by malloc
bytes_before(&$heap_12436)' = 0
bytes_after(&$heap_12437)' = &$unknown_272929
$heap_12437' is allocated by malloc
bytes_before(&$heap_12437)' = 0
hostlist' = &$heap_12433
hp' = &$heap_12434
i' = 0
num' = &$unknown_272919
tmbuf.tm_sec' = &$unknown_272918




Change Warning 22042.28703 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: