Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at lpvm.c:1046

Categories: LANG.MEM.NPD CWE:476
Warning ID: 333.29012
Procedure: check_routeadd
Trace: view
Modified: Thu Nov 26 11:29:31 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away
Legend
Warning Location Contributes Parse Error
Other Warning Two or More Loop Iterations On Execution Path
Comment Macro Preprocessor
Include Keyword Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/src/lpvm.c
   Enter check_routeadd
 1030 check_routeadd(pcbp) 
 1031         struct ttpcb *pcbp;
 1032 {
 1033         struct waitc *wp, *wp2;
 1034         struct pmsg *up;
 1035         int sbf;
 1036  
 1037         wp = waitlist->wa_link;
 1038         while (wp != waitlist) {
 1039                 wp2 = wp->wa_link;   /* Use After Free (ID: 342.29020) */
 1040                 if (wp->wa_kind == WT_ROUTEA) {
 1041                         sbf = pvm_setsbuf(pvm_mkbuf(PvmDataFoo));
 1042                         pvm_pkint(&pcbp->tt_tid, 1, 1);
 1043                         pvm_pkint(&pcbp->tt_fd, 1, 1);
 1044                         sbf = pvm_setsbuf(sbf);
true1045                         up = midtobuf(sbf);
up <= 40951046                         up->m_ctx = wp->wa_mesg->m_ctx;     /* Null Pointer Dereference */
 1047                         up->m_tag = wp->wa_mesg->m_tag;
 1048                         mesg_input(up);
 1049                         if (wp->wa_count != -1 && --wp->wa_count < 1)
 1050                                 wait_delete(wp);
 1051                 }
 1052                 wp = wp2;
Preconditions 
((char*)$unknown_1153825)[12] = 15
*$unknown_1153825 != waitlist
waitlist->wa_link != waitlist
$unknown_1153825 != waitlist
Postconditions 
sbf' <= 0
up' = 0
wp' = $unknown_1153825
wp2' = *$unknown_1153825



Change Warning 333.29012 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: