pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at ddpro.c:1097
|
|
|||||||||||||||||||||||||||||
| Legend | [ X ] |
|---|---|
|
Warning Location
Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away | |
| Legend | ||
|---|---|---|
| Warning Location | Contributes | Parse Error |
| Other Warning | Two or More Loop Iterations | On Execution Path |
| Comment | Macro | Preprocessor |
| Include | Keyword | Preprocessed Away |
| Source | Language: C | Show LegendHide Legend | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
| Preconditions | ||||||||||||
&$unknown_320938 >= 3 &$unknown_320947 <= &$unknown_320938 - 1 &$unknown_320947 >= 2 hosts->ht_hosts[1] != 0 hosts->ht_last >= 2 ((char*)$unknown_320952)[36] = 109 strlen(((char*)&$unknown_320952)[36]) = 2 ((char*)&$unknown_320944)[116] != 0 ((char*)&$unknown_320952)[20] = 0 ((char*)&$unknown_320952)[48] = 0 busyadding = 0 filehosts = 0 lasthh = 2 numfrags != 0 numpmsgs != 0 $input_12 >= 0 $input_8476 >= 0 $input_8500 >= 0 |
||||||||||||
| Postconditions | ||||||||||||
freefrags.fr_link->fr_link->fr_rlink' = freefrags.fr_link->fr_rlink freepmsgs.m_link->m_link->m_rlink' = freepmsgs.m_link->m_rlink freefrags.fr_link->fr_max' = 0 freefrags.fr_link->fr_len' = 0 freefrags.fr_link->fr_u.ref' = 1 freefrags.fr_link->fr_u.dab' = 1 freefrags.fr_link->fr_u.spr' = 0 freefrags.fr_link->fr_rlink' = freefrags.fr_link freefrags.fr_link->fr_rip' = 0 freefrags.fr_link->fr_buf' = 0 freefrags.fr_link->fr_dat' = 0 freefrags.fr_link->fr_rlink->fr_link' = freefrags.fr_link->fr_link freepmsgs.m_link->m_rlink->m_link' = freepmsgs.m_link->m_link freefrags.fr_link->fr_link' = freefrags.fr_link __x' = 2130706433 strlen(&$unknown_320956)' = 30 ((char*)&$unknown_320956)[30]' = 0 atnewline' = 1 buf' = 0 strlen(&buf[0])' = 17 buf[17]' = 0 busyadding' = 1 count' = &$unknown_320938 errno' != 0 he' = &$heap_15140 bytes_after(&$heap_15127)' = 48 $heap_15127' is allocated by malloc $heap_15127' is allocated bytes_before(&$heap_15127)' = 0 ((char*)&$heap_15127)[16]' = 0 ((char*)&$heap_15127)[36]' = rmp ((char*)&$heap_15127)[40]' = 0 ((char*)&$heap_15127)[44]' = &$heap_15128 ((char*)&$heap_15127)[12]' = 3 $heap_15128' = &$unknown_320938 bytes_after(&$heap_15128)' = 8 $heap_15128' is allocated by malloc $heap_15128' is allocated bytes_before(&$heap_15128)' = 0 ((char*)&$heap_15128)[4]' = &$heap_15129 $heap_15129' = 0 bytes_after(&$heap_15129)' = 4 * &$unknown_320938 $heap_15129' is allocated by malloc $heap_15129' is allocated bytes_before(&$heap_15129)' = 0 bytes_after(&$heap_15131)' = 120 $heap_15131' is allocated by malloc $heap_15131' is allocated bytes_before(&$heap_15131)' = 0 ((char*)&$heap_15131)[16]' = 0 ((char*)&$heap_15131)[20]' = 0 ((char*)&$heap_15131)[8]' = 0 ((char*)&$heap_15131)[116]' = 0 ((char*)&$heap_15131)[12]' = 0 $heap_15132' = 1 bytes_after(&$heap_15132)' = 124 $heap_15132' is allocated by malloc bytes_before(&$heap_15132)' = 0 ((char*)&$heap_15132)[56]' = 2 ((char*)&$heap_15132)[72]' = 1 ((char*)&$heap_15132)[76]' = 1 ((char*)&$heap_15132)[80]' = &$heap_15131 ((char*)&$heap_15132)[84]' = &$heap_15133 ((char*)&$heap_15132)[92]' = &$heap_15134 ((char*)&$heap_15132)[100]' = 1 ((char*)&$heap_15132)[112]' = 0 $heap_15133' = &$heap_15133 bytes_after(&$heap_15133)' = 120 $heap_15133' is allocated by malloc $heap_15133' is allocated bytes_before(&$heap_15133)' = 0 ((char*)&$heap_15133)[16]' = 0 ((char*)&$heap_15133)[20]' = 0 ((char*)&$heap_15133)[4]' = &$heap_15133 ((char*)&$heap_15133)[8]' = 0 ((char*)&$heap_15133)[116]' = 0 ((char*)&$heap_15133)[12]' = 0 bytes_after(&$heap_15134)' = 120 $heap_15134' is allocated by malloc $heap_15134' is allocated bytes_before(&$heap_15134)' = 0 ((char*)&$heap_15134)[16]' = 0 ((char*)&$heap_15134)[20]' = 0 ((char*)&$heap_15134)[8]' = 0 ((char*)&$heap_15134)[116]' = 0 ((char*)&$heap_15134)[12]' = 0 $heap_15136' = $input_444 bytes_after(&$heap_15136)' = $input_12 + 1 $heap_15136' is allocated by malloc $heap_15136' is a non-heap object bytes_before(&$heap_15136)' = 0 strlen(&$heap_15136)' = $input_12 $heap_15137' = $input_8484 bytes_after(&$heap_15137)' = $input_8476 + 1 $heap_15137' is allocated by malloc $heap_15137' is a non-heap object bytes_before(&$heap_15137)' = 0 strlen(&$heap_15137)' = $input_8476 $heap_15138' = $input_8508 bytes_after(&$heap_15138)' = $input_8500 + 1 $heap_15138' is allocated by malloc $heap_15138' is a non-heap object bytes_before(&$heap_15138)' = 0 strlen(&$heap_15138)' = $input_8500 $heap_15139' = &$heap_15138 $heap_15139' is a non-heap object bytes_before(&$heap_15139)' = 0 $heap_15140' = &$heap_15136 bytes_after(&$heap_15140)' = 1024 $heap_15140' is a non-heap object bytes_before(&$heap_15140)' = 0 ((char*)&$heap_15140)[16]' = &$heap_15139 ((char*)&$heap_15140)[4]' = &$heap_15141 $heap_15141' = &$heap_15137 $heap_15141' is a non-heap object bytes_before(&$heap_15141)' = 0 $heap_15142' is allocated by malloc $heap_15142' is freed bytes_before(&$heap_15142)' = 0 bytes_after(&$heap_15143)' = strlen(((char*)&$unknown_320952)[8]) + 129 $heap_15143' is allocated by malloc $heap_15143' is freed bytes_before(&$heap_15143)' = 0 strlen(&$heap_15143)' = strlen(((char*)&$unknown_320952)[8]) + 79 hh' = 0 hp' = &$unknown_320952 hp2' = 0 i' = &$unknown_320938 - 2 j' >= 0 last_rv' = &$heap_15140 lasthh' = 2 len' = strlen(((char*)&$unknown_320952)[8]) + 141 maxhostid' >= 3 maxhostid' >= &$unknown_320938 mp2' = freepmsgs.m_link ngood' = 0 ntid' = 0 numfrags' = numfrags - 1 numpmsgs' = numpmsgs - 1 pvmdpath' = &#string10[0] tids' = 0 tmbuf.tm_sec' = &$unknown_320949 winpvmdpath' = &#string12[0] wp' = &$heap_15127 wxp' = &$heap_15128 |
||||||||||||
