Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at tdpro.c:948

Categories: LANG.MEM.NPD CWE:476
Warning ID: 282.28953
Procedure: tm_pstat
Trace: view
Modified: Thu Nov 26 11:29:05 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away
Legend
Warning Location Contributes Parse Error
Other Warning Two or More Loop Iterations On Execution Path
Comment Macro Preprocessor
Include Keyword Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/src/tdpro.c
   Enter tm_pstat
 912 tm_pstat(tp, mp) 
 913         struct task *tp;
 914         struct pmsg *mp;
 915 {
 916         int tid;
 917         struct hostd *hp;
 918         struct waitc *wp;
 919  
 920         /* unpack and sanity check tid */ 
 921  
 922         if (upkuint(mp, &tid)) {
 923                 pvmlogerror("tm_pstat() bad msg format\n");
 924                 return 0;
 925         }
 926         if (!TIDISTASK(tid)) {
 927                 pvmlogprintf("tm_pstat() bad tid %x\n", tid);
 928                 return 0;
 929         }
 930  
 931         /* nack if no such host */ 
 932  
 933         if (!(hp = tidtohost(hosts, tid))) {
 934                 mp = replymessage(mp);
 935                 pkint(mp, PvmNoTask);
 936                 sendmessage(mp);
 937                 return 0;
 938         }
 939  
 940         /* else make a wait context and send query */ 
 941  
 942         wp = wait_new(WT_PSTAT);
 943         wp->wa_tid = tp->t_tid;
 944         wp->wa_on = hp->hd_hostpart;
 945         wp->wa_mesg = replymessage(mp);
 946  
true947         mp = mesg_new(0);
mp <= 4095948         mp->m_dst = hp->hd_hostpart | TIDPVMD;     /* Null Pointer Dereference */
Preconditions 
hosts->ht_last >= 1
waitlist->wa_wid <= widbase
waitlist->wa_link != waitlist
numpmsgs = 0
widrange <= lastwid
Postconditions 
((char*)**$unknown_850974)[4]' = &$heap_311017
errno' != 0
freepmsgs.m_link' = &freepmsgs.m_link
freepmsgs.m_rlink' = &freepmsgs.m_link
bytes_after(&$heap_311017)' = 48
$heap_311017' is allocated by malloc
$heap_311017' is allocated
bytes_before(&$heap_311017)' = 0
((char*)&$heap_311017)[20]' = tp->t_tid
((char*)&$heap_311017)[24]' = 0
((char*)&$heap_311017)[28]' = &$heap_311017
((char*)&$heap_311017)[32]' = &$heap_311017
((char*)&$heap_311017)[36]' = 0
((char*)&$heap_311017)[40]' = 0
((char*)&$heap_311017)[4]' = ((char*)*$unknown_850974)[4]
((char*)&$heap_311017)[44]' = 0
((char*)&$heap_311017)[8]' = widbase + 1
((char*)&$heap_311017)[12]' = 7
hp' = &$unknown_850973
lastwid' = 1
mp' = 0
wp' = &$heap_311017



Change Warning 282.28953 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: