pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at ddpro.c:1072
|
|
|||||||||||||||||||||||||||||
| Legend | [ X ] |
|---|---|
|
Warning Location
Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away | |
| Legend | ||
|---|---|---|
| Warning Location | Contributes | Parse Error |
| Other Warning | Two or More Loop Iterations | On Execution Path |
| Comment | Macro | Preprocessor |
| Include | Keyword | Preprocessed Away |
| Source | Language: C | Show LegendHide Legend | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
| Preconditions | ||||||||||||
&$unknown_332744 >= &$unknown_332753 + 1 &$unknown_332744 >= 3 &$unknown_332753 >= 2 hosts->ht_hosts[1] != 0 hosts->ht_last >= 2 ((char*)$unknown_332758)[36] = 109 strlen(((char*)&$unknown_332758)[36]) = 2 ((char*)&$unknown_332750)[116] != 0 ((char*)&$unknown_332758)[20] = 0 ((char*)&$unknown_332758)[48] = 0 busyadding = 0 filehosts = 0 lasthh = 2 numfrags != 0 numpmsgs != 0 $input_12 >= 0 $input_8476 >= 0 $input_8500 >= 0 |
||||||||||||
| Postconditions | ||||||||||||
freefrags.fr_link->fr_link->fr_rlink' = freefrags.fr_link->fr_rlink freepmsgs.m_link->m_link->m_rlink' = freepmsgs.m_link->m_rlink freefrags.fr_link->fr_max' = 0 freefrags.fr_link->fr_len' = 0 freefrags.fr_link->fr_u.ref' = 1 freefrags.fr_link->fr_u.dab' = 1 freefrags.fr_link->fr_u.spr' = 0 freefrags.fr_link->fr_rlink' = freefrags.fr_link freefrags.fr_link->fr_rip' = 0 freefrags.fr_link->fr_buf' = 0 freefrags.fr_link->fr_dat' = 0 freefrags.fr_link->fr_rlink->fr_link' = freefrags.fr_link->fr_link freepmsgs.m_link->m_rlink->m_link' = freepmsgs.m_link->m_link freefrags.fr_link->fr_link' = freefrags.fr_link __x' = 2130706433 atnewline' = 1 buf' = 0 strlen(&buf[0])' = 17 buf[17]' = 0 busyadding' = 1 count' = &$unknown_332744 errno' != 0 he' = &$heap_21729 bytes_after(&$heap_21716)' = 48 $heap_21716' is allocated by malloc $heap_21716' is allocated bytes_before(&$heap_21716)' = 0 ((char*)&$heap_21716)[16]' = 0 ((char*)&$heap_21716)[36]' = rmp ((char*)&$heap_21716)[40]' = 0 ((char*)&$heap_21716)[44]' = &$heap_21717 ((char*)&$heap_21716)[12]' = 3 $heap_21717' = &$unknown_332744 bytes_after(&$heap_21717)' = 8 $heap_21717' is allocated by malloc $heap_21717' is allocated bytes_before(&$heap_21717)' = 0 ((char*)&$heap_21717)[4]' = &$heap_21718 $heap_21718' = 0 bytes_after(&$heap_21718)' = 4 * &$unknown_332744 $heap_21718' is allocated by malloc $heap_21718' is allocated bytes_before(&$heap_21718)' = 0 bytes_after(&$heap_21720)' = 120 $heap_21720' is allocated by malloc $heap_21720' is allocated bytes_before(&$heap_21720)' = 0 ((char*)&$heap_21720)[16]' = 0 ((char*)&$heap_21720)[20]' = 0 ((char*)&$heap_21720)[8]' = 0 ((char*)&$heap_21720)[116]' = 0 ((char*)&$heap_21720)[12]' = 0 $heap_21721' = 1 bytes_after(&$heap_21721)' = 124 $heap_21721' is allocated by malloc bytes_before(&$heap_21721)' = 0 ((char*)&$heap_21721)[56]' = 2 ((char*)&$heap_21721)[72]' = 1 ((char*)&$heap_21721)[76]' = 1 ((char*)&$heap_21721)[80]' = &$heap_21720 ((char*)&$heap_21721)[84]' = &$heap_21722 ((char*)&$heap_21721)[92]' = &$heap_21723 ((char*)&$heap_21721)[100]' = 1 ((char*)&$heap_21721)[112]' = 0 $heap_21722' = &$heap_21722 bytes_after(&$heap_21722)' = 120 $heap_21722' is allocated by malloc $heap_21722' is allocated bytes_before(&$heap_21722)' = 0 ((char*)&$heap_21722)[16]' = 0 ((char*)&$heap_21722)[20]' = 0 ((char*)&$heap_21722)[4]' = &$heap_21722 ((char*)&$heap_21722)[8]' = 0 ((char*)&$heap_21722)[116]' = 0 ((char*)&$heap_21722)[12]' = 0 bytes_after(&$heap_21723)' = 120 $heap_21723' is allocated by malloc $heap_21723' is allocated bytes_before(&$heap_21723)' = 0 ((char*)&$heap_21723)[16]' = 0 ((char*)&$heap_21723)[20]' = 0 ((char*)&$heap_21723)[8]' = 0 ((char*)&$heap_21723)[116]' = 0 ((char*)&$heap_21723)[12]' = 0 $heap_21725' = $input_444 bytes_after(&$heap_21725)' = $input_12 + 1 $heap_21725' is allocated by malloc $heap_21725' is a non-heap object bytes_before(&$heap_21725)' = 0 strlen(&$heap_21725)' = $input_12 $heap_21726' = $input_8484 bytes_after(&$heap_21726)' = $input_8476 + 1 $heap_21726' is allocated by malloc $heap_21726' is a non-heap object bytes_before(&$heap_21726)' = 0 strlen(&$heap_21726)' = $input_8476 $heap_21727' = $input_8508 bytes_after(&$heap_21727)' = $input_8500 + 1 $heap_21727' is allocated by malloc $heap_21727' is a non-heap object bytes_before(&$heap_21727)' = 0 strlen(&$heap_21727)' = $input_8500 $heap_21728' = &$heap_21727 $heap_21728' is a non-heap object bytes_before(&$heap_21728)' = 0 $heap_21729' = &$heap_21725 bytes_after(&$heap_21729)' = 1024 $heap_21729' is a non-heap object bytes_before(&$heap_21729)' = 0 ((char*)&$heap_21729)[16]' = &$heap_21728 ((char*)&$heap_21729)[4]' = &$heap_21730 $heap_21730' = &$heap_21726 $heap_21730' is a non-heap object bytes_before(&$heap_21730)' = 0 $heap_21731' is allocated by malloc $heap_21731' is freed bytes_before(&$heap_21731)' = 0 hh' = 0 hp' = &$unknown_332758 hp2' = 0 i' = &$unknown_332744 - 2 j' >= 0 last_rv' = &$heap_21729 lasthh' = 2 len' = strlen(((char*)&$unknown_332758)[8]) + 129 maxhostid' >= 3 maxhostid' >= &$unknown_332744 mp2' = freepmsgs.m_link ngood' = 0 ntid' = 0 numfrags' = numfrags - 1 numpmsgs' = numpmsgs - 1 pvmdpath' = &#string10[0] tids' = 0 tmbuf.tm_sec' = &$unknown_332755 winpvmdpath' = &#string12[0] wp' = &$heap_21716 wxp' = &$heap_21717 |
||||||||||||