CodeSonar : pvm3.4.6 : Null Pointer Dereference

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at lpvmgen.c:4810

Categories:	LANG.MEM.NPD CWE:476
Warning ID:	398.29110
Procedure:	pvm_export
Trace:	view
Modified:	Thu Nov 26 11:32:55 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/kat0/fletcher/SATE/2010/pvm3/src/lpvmgen.c

			Enter pvm_export

pvm_export(name)

char *name;

{

char *vn = "PVM_EXPORT";

char *e;

char *p, *q;

int l;

if (!name[0])

goto done;

if (e = getenv(vn)) {

p = e;

while (*p) {

while (*p == ':')

p++;

q = p;

while (*q && *q != ':')

4803

q++;

4804

l = q - p;

4805

if (strlen(name) == l && !strncmp(name, p, l))

goto done;

p = q;

}

p = TALLOC(strlen(vn) + strlen(e) + strlen(name) + 3, char, "str");

p <= 4095

4810

strcpy(p, vn); /* Null Pointer Dereference */

Preconditions

&$heap_373714 <= &$unknown_7585817 - 2
*name != 0
strlen(name) >= 1
$unknown_7585817 != 0
$unknown_7585817 != 58
strlen(&$unknown_7585817) = 2
((char*)&$unknown_7585817)[2] = 0
((char*)&$unknown_7585817)[1] != 0
((char*)&$unknown_7585817)[1] != 58
$input_12 >= 1

Postconditions

e' = &$heap_373714
errno' != 0
$heap_373714' = 58
bytes_after(&$heap_373714)' = $input_12 + 1
$heap_373714' is allocated by malloc
$heap_373714' is a non-heap object
bytes_before(&$heap_373714)' = 0
strlen(&$heap_373714)' = $input_12
l' = strlen(name)
p' = 0
q' = &$unknown_7585817 + 2
vn' = &#string54[0]

Change Warning 398.29110 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: