Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at pvm_gstat.c:106

Categories: LANG.MEM.NPD CWE:476
Warning ID: 545.29335
Procedure: main
Trace: view
Modified: Thu Nov 26 11:38:23 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away
Legend
Warning Location Contributes Parse Error
Other Warning Two or More Loop Iterations On Execution Path
Comment Macro Preprocessor
Include Keyword Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/pvmgs/pvm_gstat.c
   Enter main
 51 main(argc, argv) 
 52 int argc;
 53 char *argv[];
 54 {
 55     int gstid;
 56     int i, j, ng;  
 57     GROUP_STRUCT group;
 58         group.len = 0; group.name = (char *) NULL;
 59         group.tids = (int *) NULL; group.btids = (int *) NULL;
 60         pvm_mytid();
 61         if((gstid = gs_getgstid()) < 0)  
 62         {
 63             fprintf(stderr, "%s: no groups server\n", argv[0]);
 64             return(-1);
 65         }
 66         pvm_setcontext( SYSCTX_DG );
 67         pvm_initsend(PvmDataDefault);
 68         pvm_send(gstid, GSLS);
 69         if ( pvm_trecv(gstid, GSLS, pvmgs_tmout) <= 0)  
 70         {
 71              fprintf(stderr, "Error receiving message from group server\n");
 72              exit (-1);
 73         }
 74        
 75         /* Unpack the information for each group                           */ 
 76         pvm_upkint(&ng, 1, 1);
 77         if (ng == 0)   /* Uninitialized Variable (ID: 548.29341) */
 78             fprintf(stdout, "no groups exist\n");
 79         for (i = 0; i < ng; i++)  
 80         {
 81             pvm_upkint(&(group.len),1,1);
 82             NEWMEM(group.name, group.len+1,char);
 83             pvm_upkstr(group.name);
 84             pvm_upkint(&(group.ntids), 1, 1);
 85             pvm_upkint(&(group.maxntids), 1,1);
 86             pvm_upkint(&(group.barrier_count), 1, 1);
 87             pvm_upkint(&(group.barrier_reached),1,1);
 88             NEWMEM(group.tids, group.maxntids, int);   /* Integer Overflow of Allocation Size (ID: 22183.29340) */
true89             NEWMEM(group.btids, group.barrier_reached, int);   /* Integer Overflow of Allocation Size (ID: 22182.29339) */
 90             pvm_upkint(group.tids, group.maxntids, 1);
 91             if (group.barrier_reached > 0)
 92                 pvm_upkint(group.btids, group.barrier_reached, 1);
 93             fprintf(stdout,  
 94                 "group: %s, size: %d,  barrier_count %d, barrier_reached %d\n",
 95                  group.name, group.ntids, group.barrier_count,  
 96                  group.barrier_reached);
 97             fputs("tids:\n", stdout);
 98             for (j = 0; j < group.maxntids; j++)
 99                 if (group.tids[j] > 0)   /* Uninitialized Variable (ID: 546.29337) */  /* Null Pointer Dereference (ID: 547.29338) */
 100                     fprintf(stdout, "%d 0x%x\t", j, group.tids[j]);
 101             fputs("\n", stdout);
 102             if (group.barrier_reached > 0)  
 103             {
 104                 fputs("tids waiting on barrier:\n", stdout);
 105                 for (j = 0; j < group.barrier_reached; j++)
group.btids <= 4095106                      fprintf(stdout, "0x%x\t", group.btids[j]);     /* Null Pointer Dereference */
 107                 fputs("\n", stdout);
Preconditions 
&$unknown_13422928 >= 1
&$unknown_13422930 != 0
&$unknown_13422931 >= 1
&$unknown_13422938 >= 1
gstid >= 0
ng >= 3
pvmautoerr != 2
pvmautoerr != 3
pvmmytid >= -1
pvmtoplvl != 0
pvmtrc.trctid >= 1
Postconditions 
*stdout' is allocated by fopen
bytes_before(stdout)' = 0
errno' != 0
group.name' = &$heap_458304
group.barrier_reached' = &$unknown_13422938
group.btids' = 0
group.len' >= -1
group.tids' = &$heap_458305
gstid' = gstid
$heap_458304' is allocated by malloc
$heap_458304' is allocated
bytes_before(&$heap_458304)' = 0
$heap_458305' is allocated by malloc
bytes_before(&$heap_458305)' = 0
i' = ng - 2
j' = 0
pvmmytid' != &$unknown_13422931
pvmrbuf' = &$unknown_13422930
pvmtrc.trctid' = &$unknown_13422931
pvmtrccodef' = &$unknown_13422929



Change Warning 545.29335 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: