CodeSonar : pvm3.4.6 : Null Pointer Dereference

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference at lpvmgen.c:4862

Categories:	LANG.MEM.NPD CWE:476
Warning ID:	400.29112
Procedure:	pvm_unexport
Trace:	view
Modified:	Thu Nov 26 11:32:56 2009 show details hide details

Priority:	None
State:	None
Finding:	None
Owner:	None
	edit properties

Legend	[ X ]
Warning Location Contributes Parse Error Other Warning Two or More Loop Iterations On Execution Path Comment Macro Preprocessor Include Keyword Preprocessed Away

Legend
Warning Location	Contributes	Parse Error
Other Warning	Two or More Loop Iterations	On Execution Path
Comment	Macro	Preprocessor
Include	Keyword	Preprocessed Away

Source | Language: C

Hide Legend

Problem	Line	Source

			/kat0/fletcher/SATE/2010/pvm3/src/lpvmgen.c

			Enter pvm_unexport

pvm_unexport(name)

char *name;

{

char *vn = "PVM_EXPORT";

char *e, *enew;

char *p, *q;

int l;

if (!name[0])

goto done;

if (e = getenv(vn)) {

p = e;

while (*p) {

while (*p == ':')

p++;

q = p;

while (*q && *q != ':')

4854

q++;

4855

l = q - p;

4856

if (strlen(name) == l && !strncmp(name, p, l)) {

4857

if (*q == ':')

4858

q++;

4859

else if (p > e && *(p - 1) == ':')

4860

p--;

true

4861

enew = TALLOC(strlen(vn) + (p - e) + strlen(q) + 2, char, "str");

enew <= 4095

4862

strcpy(enew, vn); /* Null Pointer Dereference */

Preconditions

&$unknown_7585970 <= &$unknown_7585971 - 2
&$unknown_7585970 >= &$heap_373760
*name != 0
strlen(name) >= 1
$unknown_7585970 = 58
strlen(&$unknown_7585970) != strlen(name) + 2
strlen(&$unknown_7585970) > strlen(name) + 2
strlen(&$unknown_7585970) > 3
((char*)&$unknown_7585970)[2] != 0
((char*)&$unknown_7585970)[2] != 58
((char*)&$unknown_7585970)[1] = 58
$unknown_7585971 != 0
$unknown_7585971 != 58
strlen(&$unknown_7585971) = 2
((char*)&$unknown_7585971)[2] = 0
((char*)&$unknown_7585971)[1] != 0
((char*)&$unknown_7585971)[1] != 58
$input_12 >= 1

Postconditions

codesonar_distance_tweak' = 3
e' = &$heap_373760
enew' = 0
errno' != 0
$heap_373760' = 58
bytes_after(&$heap_373760)' = $input_12 + 1
$heap_373760' is allocated by malloc
$heap_373760' is a non-heap object
bytes_before(&$heap_373760)' = 0
strlen(&$heap_373760)' = $input_12
l' = strlen(name)
p' = &$unknown_7585970 + 1
q' = &$unknown_7585971 + 2
vn' = &#string54[0]

Change Warning 400.29112 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: