CodeSonar : pvm3.4.6 : Null Pointer Dereference

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at pvmd.c:5514

Categories:

LANG.MEM.NPD CWE:476

Warning ID:

261.28912

Similar Warnings:

261.28913

Procedure:

slave_config

Trace:

view

Modified:

Thu Nov 26 11:28:30 2009 show details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/kat0/fletcher/SATE/2010/pvm3/src/pvmd.c

			Enter slave_config

5449

slave_config(hn, argc, argv)

char *hn;

int argc;

char **argv;

{

int lh; /* local host index */

5455

int mh; /* master host index */

struct hostd *hp;

int i, j;

int ac;

int ms = 0; /* manual (humanoid) startup */

5460

#ifndef WIN32

5461

int dof = 1; /* fork, exit parent (default) */

#else

int dof = 0;

#endif

int bad = 0;

char *p;

char *s;

for (i = j = ac = 1; i < argc; i++) {

5470

if (argv[i][0] == '-') {

5471

switch (argv[i][1]) {

case 'S':

ms = 1;

break;

case 'f':

dof = 0;

break;

default:

pvmlogprintf("slave_config() unknown switch: %s\n", argv[i]);

bad++;

}

} else {

argv[j++] = argv[i];

ac++;

}

}

argc = ac;

if (bad || argc != 6) {

5494

pvmlogerror("slave_config: bad args\n");

pvmbailout(0);

}

mh = atoi(argv[1]);

lh = atoi(argv[4]);

hosts = ht_new (1);

hosts->ht_serial = 1;

5502

hosts->ht_master = mh;

5503

hosts->ht_cons = mh;

5504

hosts->ht_local = lh;

5505

5506

hp = hd_new (mh );

5507

hp->hd_name = STRALLOC("?"); /* Null Pointer Dereference (ID: 262.28915) */

5508

hex_inadport(argv[2], &hp->hd_sad );

5509

hp->hd_mtu = atoi(argv[3]);

5510

ht_insert(hosts, hp );

hd_unref(hp );

hp = hd_new (0);

hp->hd_name = STRALLOC("pvmd'"); /* Null Pointer Dereference */

Preconditions

argc >= 3
*argv[2] != 58
((char*)&$heap_171200)[8] >= -1

Postconditions

ac' = 6
argc' = 6
atnewline' = 1
bad' = 0
errno' != 0
$heap_171200' = 1
bytes_after(&$heap_171200)' = 32
$heap_171200' is allocated by malloc
$heap_171200' is allocated
bytes_before(&$heap_171200)' = 0
((char*)&$heap_171200)[16]' = $input_12
((char*)&$heap_171200)[20]' = $input_103996
((char*)&$heap_171200)[24]' = 0
((char*)&$heap_171200)[8]' = ((char*)&$heap_171200)[8] + 1
((char*)&$heap_171200)[12]' = $input_12
bytes_after(&$heap_171201)' = 120
$heap_171201' is allocated by malloc
$heap_171201' is allocated
bytes_before(&$heap_171201)' = 0
((char*)&$heap_171201)[16]' = 0
((char*)&$heap_171201)[20]' = 0
((char*)&$heap_171201)[8]' = 0
((char*)&$heap_171201)[116]' = 0
((char*)&$heap_171201)[12]' = 0
$heap_171202' = &$heap_171202
bytes_after(&$heap_171202)' = 120
$heap_171202' is allocated by malloc
$heap_171202' is allocated
bytes_before(&$heap_171202)' = 0
((char*)&$heap_171202)[16]' = 0
((char*)&$heap_171202)[20]' = 0
((char*)&$heap_171202)[4]' = &$heap_171202
((char*)&$heap_171202)[8]' = 0
((char*)&$heap_171202)[116]' = 0
((char*)&$heap_171202)[12]' = 0
$heap_171203' = &$heap_171203
bytes_after(&$heap_171203)' = 120
$heap_171203' is allocated by malloc
$heap_171203' is allocated
bytes_before(&$heap_171203)' = 0
((char*)&$heap_171203)[16]' = 0
((char*)&$heap_171203)[20]' = 0
((char*)&$heap_171203)[4]' = &$heap_171203
((char*)&$heap_171203)[8]' = 0
((char*)&$heap_171203)[116]' = 0
((char*)&$heap_171203)[12]' = 0
$heap_171204' = 1
bytes_after(&$heap_171204)' = 124
$heap_171204' is allocated by malloc
bytes_before(&$heap_171204)' = 0
((char*)&$heap_171204)[52]' = $input_104004
((char*)&$heap_171204)[56]' = 2
((char*)&$heap_171204)[72]' = 1
((char*)&$heap_171204)[76]' = 1
((char*)&$heap_171204)[80]' = &$heap_171203
((char*)&$heap_171204)[8]' = &$heap_171206
((char*)&$heap_171204)[84]' = &$heap_171202
((char*)&$heap_171204)[92]' = &$heap_171201
((char*)&$heap_171204)[100]' = 1
((char*)&$heap_171204)[108]' = 1000
((char*)&$heap_171204)[112]' = &$heap_171205
bytes_after(&$heap_171205)' = 20
$heap_171205' is allocated by malloc
$heap_171205' is allocated
bytes_before(&$heap_171205)' = 0
((char*)&$heap_171205)[16]' = 0
((char*)&$heap_171205)[8]' = 0
((char*)&$heap_171205)[12]' = 0
$heap_171206' = 63
bytes_after(&$heap_171206)' = 2
$heap_171206' is allocated by malloc
$heap_171206' is allocated
bytes_before(&$heap_171206)' = 0
strlen(&$heap_171206)' = 1
tocttou($heap_171206)' = tocttou(#string176)
$heap_171207' = 112
bytes_after(&$heap_171207)' = 6
$heap_171207' is allocated by malloc
$heap_171207' is allocated
bytes_before(&$heap_171207)' = 0
strlen(&$heap_171207)' = 5
tocttou($heap_171207)' = tocttou(#string167)
hosts' = &$heap_171200
hp' = 0
i' = argc
lh' = $input_103996
mh' = $input_12
tmbuf.tm_sec' = &$unknown_733204

Change Warning 261.28912 : Null Pointer Dereference

Because they are very similar, this warning shares annotations with warning 261.28913.

Priority:
State:
Finding:
Owner:
Note: