pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at ddpro.c:1096
|
|
|||||||||||||||||||||||||||||
| Legend | [ X ] |
|---|---|
|
Warning Location
Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away | |
| Legend | ||
|---|---|---|
| Warning Location | Contributes | Parse Error |
| Other Warning | Two or More Loop Iterations | On Execution Path |
| Comment | Macro | Preprocessor |
| Include | Keyword | Preprocessed Away |
| Source | Language: C | Show LegendHide Legend | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
| Preconditions | ||||||||||||
&$unknown_325480 >= &$unknown_325489 + 1 &$unknown_325480 >= 3 &$unknown_325489 >= 2 hosts->ht_hosts[1] != 0 hosts->ht_last >= 2 ((char*)$unknown_325494)[36] = 109 strlen(((char*)&$unknown_325494)[36]) = 2 ((char*)&$unknown_325486)[116] != 0 ((char*)&$unknown_325494)[20] = 0 ((char*)&$unknown_325494)[48] = 0 busyadding = 0 filehosts = 0 lasthh = 2 numfrags != 0 numpmsgs != 0 $input_12 >= 0 $input_8476 >= 0 $input_8500 >= 0 |
||||||||||||
| Postconditions | ||||||||||||
freefrags.fr_link->fr_link->fr_rlink' = freefrags.fr_link->fr_rlink freepmsgs.m_link->m_link->m_rlink' = freepmsgs.m_link->m_rlink freefrags.fr_link->fr_max' = 0 freefrags.fr_link->fr_len' = 0 freefrags.fr_link->fr_u.ref' = 1 freefrags.fr_link->fr_u.dab' = 1 freefrags.fr_link->fr_u.spr' = 0 freefrags.fr_link->fr_rlink' = freefrags.fr_link freefrags.fr_link->fr_rip' = 0 freefrags.fr_link->fr_buf' = 0 freefrags.fr_link->fr_dat' = 0 freefrags.fr_link->fr_rlink->fr_link' = freefrags.fr_link->fr_link freepmsgs.m_link->m_rlink->m_link' = freepmsgs.m_link->m_link freefrags.fr_link->fr_link' = freefrags.fr_link __x' = 2130706433 strlen(&$unknown_325498)' = 30 ((char*)&$unknown_325498)[30]' = 0 atnewline' = 1 buf' = 0 strlen(&buf[0])' = 17 buf[17]' = 0 busyadding' = 1 count' = &$unknown_325480 errno' != 0 he' = &$heap_17688 bytes_after(&$heap_17675)' = 48 $heap_17675' is allocated by malloc $heap_17675' is allocated bytes_before(&$heap_17675)' = 0 ((char*)&$heap_17675)[16]' = 0 ((char*)&$heap_17675)[36]' = rmp ((char*)&$heap_17675)[40]' = 0 ((char*)&$heap_17675)[44]' = &$heap_17676 ((char*)&$heap_17675)[12]' = 3 $heap_17676' = &$unknown_325480 bytes_after(&$heap_17676)' = 8 $heap_17676' is allocated by malloc $heap_17676' is allocated bytes_before(&$heap_17676)' = 0 ((char*)&$heap_17676)[4]' = &$heap_17677 $heap_17677' = 0 bytes_after(&$heap_17677)' = 4 * &$unknown_325480 $heap_17677' is allocated by malloc $heap_17677' is allocated bytes_before(&$heap_17677)' = 0 bytes_after(&$heap_17679)' = 120 $heap_17679' is allocated by malloc $heap_17679' is allocated bytes_before(&$heap_17679)' = 0 ((char*)&$heap_17679)[16]' = 0 ((char*)&$heap_17679)[20]' = 0 ((char*)&$heap_17679)[8]' = 0 ((char*)&$heap_17679)[116]' = 0 ((char*)&$heap_17679)[12]' = 0 $heap_17680' = 1 bytes_after(&$heap_17680)' = 124 $heap_17680' is allocated by malloc bytes_before(&$heap_17680)' = 0 ((char*)&$heap_17680)[56]' = 2 ((char*)&$heap_17680)[72]' = 1 ((char*)&$heap_17680)[76]' = 1 ((char*)&$heap_17680)[80]' = &$heap_17679 ((char*)&$heap_17680)[84]' = &$heap_17681 ((char*)&$heap_17680)[92]' = &$heap_17682 ((char*)&$heap_17680)[100]' = 1 ((char*)&$heap_17680)[112]' = 0 bytes_after(&$heap_17681)' = 120 $heap_17681' is allocated by malloc $heap_17681' is allocated bytes_before(&$heap_17681)' = 0 ((char*)&$heap_17681)[16]' = 0 ((char*)&$heap_17681)[20]' = 0 ((char*)&$heap_17681)[8]' = 0 ((char*)&$heap_17681)[116]' = 0 ((char*)&$heap_17681)[12]' = 0 bytes_after(&$heap_17682)' = 120 $heap_17682' is allocated by malloc $heap_17682' is allocated bytes_before(&$heap_17682)' = 0 ((char*)&$heap_17682)[16]' = 0 ((char*)&$heap_17682)[20]' = 0 ((char*)&$heap_17682)[8]' = 0 ((char*)&$heap_17682)[116]' = 0 ((char*)&$heap_17682)[12]' = 0 $heap_17684' = $input_444 bytes_after(&$heap_17684)' = $input_12 + 1 $heap_17684' is allocated by malloc $heap_17684' is a non-heap object bytes_before(&$heap_17684)' = 0 strlen(&$heap_17684)' = $input_12 $heap_17685' = $input_8484 bytes_after(&$heap_17685)' = $input_8476 + 1 $heap_17685' is allocated by malloc $heap_17685' is a non-heap object bytes_before(&$heap_17685)' = 0 strlen(&$heap_17685)' = $input_8476 $heap_17686' = $input_8508 bytes_after(&$heap_17686)' = $input_8500 + 1 $heap_17686' is allocated by malloc $heap_17686' is a non-heap object bytes_before(&$heap_17686)' = 0 strlen(&$heap_17686)' = $input_8500 $heap_17687' = &$heap_17686 $heap_17687' is a non-heap object bytes_before(&$heap_17687)' = 0 $heap_17688' = &$heap_17684 bytes_after(&$heap_17688)' = 1024 $heap_17688' is a non-heap object bytes_before(&$heap_17688)' = 0 ((char*)&$heap_17688)[16]' = &$heap_17687 ((char*)&$heap_17688)[4]' = &$heap_17689 $heap_17689' = &$heap_17685 $heap_17689' is a non-heap object bytes_before(&$heap_17689)' = 0 $heap_17690' is allocated by malloc $heap_17690' is freed bytes_before(&$heap_17690)' = 0 bytes_after(&$heap_17691)' = strlen(((char*)&$unknown_325494)[8]) + 129 $heap_17691' is allocated by malloc $heap_17691' is freed bytes_before(&$heap_17691)' = 0 strlen(&$heap_17691)' = strlen(((char*)&$unknown_325494)[8]) + 79 hh' = 0 hp' = &$unknown_325494 hp2' = 0 i' = &$unknown_325480 - 2 j' >= 0 last_rv' = &$heap_17688 lasthh' = 2 len' = strlen(((char*)&$unknown_325494)[8]) + 141 maxhostid' >= 3 maxhostid' >= &$unknown_325480 mp2' = freepmsgs.m_link ngood' = 0 ntid' = 0 numfrags' = numfrags - 1 numpmsgs' = numpmsgs - 1 pvmdpath' = &#string10[0] tids' = 0 tmbuf.tm_sec' = &$unknown_325491 winpvmdpath' = &#string12[0] wp' = &$heap_17675 wxp' = &$heap_17676 |
||||||||||||