CodeSonar : pvm3.4.6 : Null Pointer Dereference

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at tdpro.c:1885

Categories:	LANG.MEM.NPD CWE:476
Warning ID:	303.28980
Procedure:	tm_mca
Trace:	view
Modified:	Thu Nov 26 11:29:21 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/kat0/fletcher/SATE/2010/pvm3/src/tdpro.c

			Enter tm_mca

tm_mca(tp, mp)

struct task *tp;

struct pmsg *mp;

{

struct mca *mcap; /* mca descriptor */

1868

int ndst; /* num of dst tids */

1869

int *dsts; /* dst tids */

int tid;

int i, j;

* unpack list of dst tids from message (expect it to be sorted).

1875

* discard tids to nonexistent foreign hosts.

mcap = mca_new ();

mcap->mc_tid = TIDGID | tp->t_tid; /* Null Pointer Dereference (ID: 305.28982) */

1880

upkint(mp, &ndst );

true

1881

dsts = TALLOC(ndst, int, "dsts"); /* Integer Overflow of Allocation Size (ID: 304.28981) */

1882

for ( i=0, j=0 ; i < ndst ; i++ ) {

1883

upkuint(mp, &tid );

1884

if ((tid & tidhmask) == myhostpart || tidtohost (hosts, tid ))

dsts <= 4095

1885

dsts[j++] = tid; /* Null Pointer Dereference */

Preconditions

&$unknown_1007300 != 0
hosts->ht_last >= 1

Postconditions

dsts' = 0
errno' != 0
bytes_after(&$heap_334021)' = 20
$heap_334021' is allocated by malloc
$heap_334021' is allocated
bytes_before(&$heap_334021)' = 0
((char*)&$heap_334021)[16]' = 0
((char*)&$heap_334021)[12]' = 0
mcap' = &$heap_334021
ndst' >= 3

Change Warning 303.28980 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: