pvm3.4.6 : pvm3.4.6 analysis 2 : File System Race Condition at pvmd.c:5431
|
|
| Legend | [ X ] |
|---|---|
|
Warning Location
Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away | |
| Legend | ||
|---|---|---|
| Warning Location | Contributes | Parse Error |
| Other Warning | Two or More Loop Iterations | On Execution Path |
| Comment | Macro | Preprocessor |
| Include | Keyword | Preprocessed Away |
| Source | Language: C | Show LegendHide Legend | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
| Preconditions | ||||||||||||
argc = 2 &$unknown_753172 >= 4 ((char*)&((char*)((char*)$heap_187181)[28])[4])[116] != 0 $unknown_753165 != 58 hd = 0 ((char*)&$heap_187181)[4] <= 1 $input_12 >= 0 $input_8476 >= 0 $input_8500 >= 0 |
||||||||||||
| Postconditions | ||||||||||||
((char*)&((char*)((char*)$heap_187181)[28])[4])[24]' = &$heap_187196 ((char*)&((char*)((char*)$heap_187181)[28])[4])[28]' = &$heap_187198 ((char*)&((char*)((char*)$heap_187181)[28])[4])[32]' = &$heap_187199 ((char*)&((char*)((char*)$heap_187181)[28])[4])[60]' = $input_8508 ((char*)((char*)$heap_187181)[28])[60]' = $input_8508 $unknown_753169' is allocated by malloc $unknown_753169' is freed $unknown_753169' is accessed by path name debugger' = &$unknown_753166 epaths' = &$heap_187197 filehosts' = 0 he' = &$heap_187200 $heap_187181' = 1 bytes_after(&$heap_187181)' = 32 $heap_187181' is allocated by malloc $heap_187181' is allocated bytes_before(&$heap_187181)' = 0 ((char*)&$heap_187181)[16]' = 1 ((char*)&$heap_187181)[20]' = 1 ((char*)&$heap_187181)[24]' = 0 ((char*)&$heap_187181)[8]' = ((char*)&$heap_187181)[8] + 1 ((char*)&$heap_187181)[12]' = 1 bytes_after(&$heap_187182)' = 120 $heap_187182' is allocated by malloc $heap_187182' is allocated bytes_before(&$heap_187182)' = 0 ((char*)&$heap_187182)[16]' = 0 ((char*)&$heap_187182)[20]' = 0 ((char*)&$heap_187182)[8]' = 0 ((char*)&$heap_187182)[116]' = 0 ((char*)&$heap_187182)[12]' = 0 bytes_after(&$heap_187183)' = 120 $heap_187183' is allocated by malloc $heap_187183' is allocated bytes_before(&$heap_187183)' = 0 ((char*)&$heap_187183)[16]' = 0 ((char*)&$heap_187183)[20]' = 0 ((char*)&$heap_187183)[8]' = 0 ((char*)&$heap_187183)[116]' = 0 ((char*)&$heap_187183)[12]' = 0 bytes_after(&$heap_187184)' = 20 $heap_187184' is allocated by malloc $heap_187184' is allocated bytes_before(&$heap_187184)' = 0 ((char*)&$heap_187184)[16]' = 0 ((char*)&$heap_187184)[8]' = 0 ((char*)&$heap_187184)[12]' = 0 bytes_after(&$heap_187185)' = 120 $heap_187185' is allocated by malloc $heap_187185' is allocated bytes_before(&$heap_187185)' = 0 ((char*)&$heap_187185)[16]' = 0 ((char*)&$heap_187185)[20]' = 0 ((char*)&$heap_187185)[8]' = 0 ((char*)&$heap_187185)[116]' = 0 ((char*)&$heap_187185)[12]' = 0 $heap_187186' = 1 bytes_after(&$heap_187186)' = 124 $heap_187186' is allocated by malloc bytes_before(&$heap_187186)' = 0 ((char*)&$heap_187186)[44]' = pvmmydsig ((char*)&$heap_187186)[52]' = pvmudpmtu ((char*)&$heap_187186)[56]' = 2 ((char*)&$heap_187186)[72]' = 1 ((char*)&$heap_187186)[76]' = 1 ((char*)&$heap_187186)[80]' = &$heap_187185 ((char*)&$heap_187186)[8]' = &$heap_187187 ((char*)&$heap_187186)[84]' = &$heap_187183 ((char*)&$heap_187186)[92]' = &$heap_187182 ((char*)&$heap_187186)[100]' = 1 ((char*)&$heap_187186)[108]' = 1000 ((char*)&$heap_187186)[112]' = &$heap_187184 ((char*)&$heap_187186)[12]' = &$heap_187188 $heap_187187' = *hn bytes_after(&$heap_187187)' = strlen(hn) + 1 $heap_187187' is allocated by malloc $heap_187187' is allocated bytes_before(&$heap_187187)' = 0 strlen(&$heap_187187)' = strlen(hn) tocttou($heap_187187)' = tocttou(*hn) $heap_187188' = *myarchname bytes_after(&$heap_187188)' = strlen(myarchname) + 1 $heap_187188' is allocated by malloc $heap_187188' is allocated bytes_before(&$heap_187188)' = 0 strlen(&$heap_187188)' = strlen(myarchname) tocttou($heap_187188)' = tocttou(*myarchname) bytes_after(&$heap_187189)' = 120 $heap_187189' is allocated by malloc $heap_187189' is allocated bytes_before(&$heap_187189)' = 0 ((char*)&$heap_187189)[16]' = 0 ((char*)&$heap_187189)[20]' = 0 ((char*)&$heap_187189)[8]' = 0 ((char*)&$heap_187189)[116]' = 0 ((char*)&$heap_187189)[12]' = 0 bytes_after(&$heap_187190)' = 20 $heap_187190' is allocated by malloc $heap_187190' is allocated bytes_before(&$heap_187190)' = 0 ((char*)&$heap_187190)[16]' = 0 ((char*)&$heap_187190)[8]' = 0 ((char*)&$heap_187190)[12]' = 0 bytes_after(&$heap_187191)' = 120 $heap_187191' is allocated by malloc $heap_187191' is allocated bytes_before(&$heap_187191)' = 0 ((char*)&$heap_187191)[16]' = 0 ((char*)&$heap_187191)[20]' = 0 ((char*)&$heap_187191)[8]' = 0 ((char*)&$heap_187191)[116]' = 0 ((char*)&$heap_187191)[12]' = 0 bytes_after(&$heap_187192)' = 120 $heap_187192' is allocated by malloc $heap_187192' is allocated bytes_before(&$heap_187192)' = 0 ((char*)&$heap_187192)[16]' = 0 ((char*)&$heap_187192)[20]' = 0 ((char*)&$heap_187192)[8]' = 0 ((char*)&$heap_187192)[116]' = 0 ((char*)&$heap_187192)[12]' = 0 $heap_187193' = 1 bytes_after(&$heap_187193)' = 124 $heap_187193' is allocated by malloc bytes_before(&$heap_187193)' = 0 ((char*)&$heap_187193)[44]' = pvmmydsig ((char*)&$heap_187193)[52]' = pvmudpmtu ((char*)&$heap_187193)[56]' = 2 ((char*)&$heap_187193)[72]' = 1 ((char*)&$heap_187193)[76]' = 1 ((char*)&$heap_187193)[80]' = &$heap_187192 ((char*)&$heap_187193)[8]' = &$heap_187194 ((char*)&$heap_187193)[84]' = &$heap_187191 ((char*)&$heap_187193)[92]' = &$heap_187189 ((char*)&$heap_187193)[100]' = 1 ((char*)&$heap_187193)[108]' = 1000 ((char*)&$heap_187193)[112]' = &$heap_187190 ((char*)&$heap_187193)[12]' = &$heap_187195 $heap_187194' = 112 bytes_after(&$heap_187194)' = 6 $heap_187194' is allocated by malloc $heap_187194' is allocated bytes_before(&$heap_187194)' = 0 strlen(&$heap_187194)' = 5 tocttou($heap_187194)' = tocttou(#string167) $heap_187195' = *myarchname bytes_after(&$heap_187195)' = strlen(myarchname) + 1 $heap_187195' is allocated by malloc $heap_187195' is allocated bytes_before(&$heap_187195)' = 0 strlen(&$heap_187195)' = strlen(myarchname) tocttou($heap_187195)' = tocttou(*myarchname) $heap_187196' = 36 bytes_after(&$heap_187196)' = 49 $heap_187196' is allocated by malloc $heap_187196' is allocated bytes_before(&$heap_187196)' = 0 tocttou($heap_187196)' = tocttou(#string168) $heap_187197' = &$unknown_753165 bytes_after(&$heap_187197)' = 8 $heap_187197' is allocated by malloc $heap_187197' is allocated bytes_before(&$heap_187197)' = 0 ((char*)&$heap_187197)[4]' = 0 $heap_187198' = 36 bytes_after(&$heap_187198)' = 23 $heap_187198' is allocated by malloc $heap_187198' is allocated bytes_before(&$heap_187198)' = 0 tocttou($heap_187198)' = tocttou(#string170) $heap_187199' = 47 bytes_after(&$heap_187199)' = strlen(&$unknown_753168) + 1 $heap_187199' is allocated by malloc $heap_187199' is allocated bytes_before(&$heap_187199)' = 0 tocttou($heap_187199)' = tocttou(#string17) $heap_187200' = &$heap_187201 bytes_after(&$heap_187200)' = 1024 $heap_187200' is a non-heap object bytes_before(&$heap_187200)' = 0 ((char*)&$heap_187200)[16]' = &$heap_187203 ((char*)&$heap_187200)[4]' = &$heap_187204 $heap_187201' = $input_444 bytes_after(&$heap_187201)' = $input_12 + 1 $heap_187201' is allocated by malloc $heap_187201' is a non-heap object bytes_before(&$heap_187201)' = 0 strlen(&$heap_187201)' = $input_12 $heap_187202' = $input_8508 bytes_after(&$heap_187202)' = $input_8500 + 1 $heap_187202' is allocated by malloc $heap_187202' is a non-heap object bytes_before(&$heap_187202)' = 0 strlen(&$heap_187202)' = $input_8500 $heap_187203' = &$heap_187202 $heap_187203' is a non-heap object bytes_before(&$heap_187203)' = 0 $heap_187204' = &$heap_187205 $heap_187204' is a non-heap object bytes_before(&$heap_187204)' = 0 $heap_187205' = $input_8484 bytes_after(&$heap_187205)' = $input_8476 + 1 $heap_187205' is allocated by malloc $heap_187205' is a non-heap object bytes_before(&$heap_187205)' = 0 strlen(&$heap_187205)' = $input_8476 $heap_187206' is allocated by open $heap_187206' is allocated hosts' = &$heap_187181 hp' = ((char*)$heap_187181)[28] i' = 2 last_rv' = &$heap_187200 s' = &$unknown_753169 |
||||||||||||