pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at ddpro.c:1071
|
|
|||||||||||||||||||||||||||||
| Legend | [ X ] |
|---|---|
|
Warning Location
Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away | |
| Legend | ||
|---|---|---|
| Warning Location | Contributes | Parse Error |
| Other Warning | Two or More Loop Iterations | On Execution Path |
| Comment | Macro | Preprocessor |
| Include | Keyword | Preprocessed Away |
| Source | Language: C | Show LegendHide Legend | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
| Preconditions | ||||||||||||
&$unknown_336602 >= 3 &$unknown_336611 <= &$unknown_336602 - 1 &$unknown_336611 >= 2 hosts->ht_hosts[1] != 0 hosts->ht_last >= 2 ((char*)$unknown_336616)[36] = 109 strlen(((char*)&$unknown_336616)[36]) = 2 ((char*)&$unknown_336608)[116] != 0 ((char*)&$unknown_336616)[20] = 0 ((char*)&$unknown_336616)[48] = 0 busyadding = 0 filehosts = 0 lasthh = 2 numfrags != 0 numpmsgs != 0 $input_12 >= 0 $input_8476 >= 0 $input_8500 >= 0 |
||||||||||||
| Postconditions | ||||||||||||
freefrags.fr_link->fr_link->fr_rlink' = freefrags.fr_link->fr_rlink freepmsgs.m_link->m_link->m_rlink' = freepmsgs.m_link->m_rlink freefrags.fr_link->fr_max' = 0 freefrags.fr_link->fr_len' = 0 freefrags.fr_link->fr_u.ref' = 1 freefrags.fr_link->fr_u.dab' = 1 freefrags.fr_link->fr_u.spr' = 0 freefrags.fr_link->fr_rlink' = freefrags.fr_link freefrags.fr_link->fr_rip' = 0 freefrags.fr_link->fr_buf' = 0 freefrags.fr_link->fr_dat' = 0 freefrags.fr_link->fr_rlink->fr_link' = freefrags.fr_link->fr_link freepmsgs.m_link->m_rlink->m_link' = freepmsgs.m_link->m_link freefrags.fr_link->fr_link' = freefrags.fr_link __x' = 2130706433 atnewline' = 1 buf' = 0 strlen(&buf[0])' = 17 buf[17]' = 0 busyadding' = 1 count' = &$unknown_336602 errno' != 0 he' = &$heap_24092 bytes_after(&$heap_24079)' = 48 $heap_24079' is allocated by malloc $heap_24079' is allocated bytes_before(&$heap_24079)' = 0 ((char*)&$heap_24079)[16]' = 0 ((char*)&$heap_24079)[36]' = rmp ((char*)&$heap_24079)[40]' = 0 ((char*)&$heap_24079)[44]' = &$heap_24080 ((char*)&$heap_24079)[12]' = 3 $heap_24080' = &$unknown_336602 bytes_after(&$heap_24080)' = 8 $heap_24080' is allocated by malloc $heap_24080' is allocated bytes_before(&$heap_24080)' = 0 ((char*)&$heap_24080)[4]' = &$heap_24081 $heap_24081' = 0 bytes_after(&$heap_24081)' = 4 * &$unknown_336602 $heap_24081' is allocated by malloc $heap_24081' is allocated bytes_before(&$heap_24081)' = 0 bytes_after(&$heap_24083)' = 120 $heap_24083' is allocated by malloc $heap_24083' is allocated bytes_before(&$heap_24083)' = 0 ((char*)&$heap_24083)[16]' = 0 ((char*)&$heap_24083)[20]' = 0 ((char*)&$heap_24083)[8]' = 0 ((char*)&$heap_24083)[116]' = 0 ((char*)&$heap_24083)[12]' = 0 $heap_24084' = 1 bytes_after(&$heap_24084)' = 124 $heap_24084' is allocated by malloc bytes_before(&$heap_24084)' = 0 ((char*)&$heap_24084)[56]' = 2 ((char*)&$heap_24084)[72]' = 1 ((char*)&$heap_24084)[76]' = 1 ((char*)&$heap_24084)[80]' = &$heap_24083 ((char*)&$heap_24084)[84]' = &$heap_24085 ((char*)&$heap_24084)[92]' = &$heap_24086 ((char*)&$heap_24084)[100]' = 1 ((char*)&$heap_24084)[112]' = 0 $heap_24085' = &$heap_24085 bytes_after(&$heap_24085)' = 120 $heap_24085' is allocated by malloc $heap_24085' is allocated bytes_before(&$heap_24085)' = 0 ((char*)&$heap_24085)[16]' = 0 ((char*)&$heap_24085)[20]' = 0 ((char*)&$heap_24085)[4]' = &$heap_24085 ((char*)&$heap_24085)[8]' = 0 ((char*)&$heap_24085)[116]' = 0 ((char*)&$heap_24085)[12]' = 0 bytes_after(&$heap_24086)' = 120 $heap_24086' is allocated by malloc $heap_24086' is allocated bytes_before(&$heap_24086)' = 0 ((char*)&$heap_24086)[16]' = 0 ((char*)&$heap_24086)[20]' = 0 ((char*)&$heap_24086)[8]' = 0 ((char*)&$heap_24086)[116]' = 0 ((char*)&$heap_24086)[12]' = 0 $heap_24088' = $input_444 bytes_after(&$heap_24088)' = $input_12 + 1 $heap_24088' is allocated by malloc $heap_24088' is a non-heap object bytes_before(&$heap_24088)' = 0 strlen(&$heap_24088)' = $input_12 $heap_24089' = $input_8484 bytes_after(&$heap_24089)' = $input_8476 + 1 $heap_24089' is allocated by malloc $heap_24089' is a non-heap object bytes_before(&$heap_24089)' = 0 strlen(&$heap_24089)' = $input_8476 $heap_24090' = $input_8508 bytes_after(&$heap_24090)' = $input_8500 + 1 $heap_24090' is allocated by malloc $heap_24090' is a non-heap object bytes_before(&$heap_24090)' = 0 strlen(&$heap_24090)' = $input_8500 $heap_24091' = &$heap_24090 $heap_24091' is a non-heap object bytes_before(&$heap_24091)' = 0 $heap_24092' = &$heap_24088 bytes_after(&$heap_24092)' = 1024 $heap_24092' is a non-heap object bytes_before(&$heap_24092)' = 0 ((char*)&$heap_24092)[16]' = &$heap_24091 ((char*)&$heap_24092)[4]' = &$heap_24093 $heap_24093' = &$heap_24089 $heap_24093' is a non-heap object bytes_before(&$heap_24093)' = 0 $heap_24094' is allocated by malloc $heap_24094' is freed bytes_before(&$heap_24094)' = 0 hh' = 0 hp' = &$unknown_336616 hp2' = 0 i' = &$unknown_336602 - 2 j' >= 0 last_rv' = &$heap_24092 lasthh' = 2 len' = strlen(((char*)&$unknown_336616)[8]) + 129 maxhostid' >= 3 maxhostid' >= &$unknown_336602 mp2' = freepmsgs.m_link ngood' = 0 ntid' = 0 numfrags' = numfrags - 1 numpmsgs' = numpmsgs - 1 pvmdpath' = &#string10[0] tids' = 0 tmbuf.tm_sec' = &$unknown_336613 winpvmdpath' = &#string12[0] wp' = &$heap_24079 wxp' = &$heap_24080 |
||||||||||||