Text  |   XML   |   Visible Warnings:

pvm3.4.6 : pvm3.4.6 analysis 2 : Null Pointer Dereference  at pkt.c:157

Categories: LANG.MEM.NPD CWE:476
Warning ID: 79.28667
Procedure: pk_free
Trace: view
Modified: Thu Nov 26 11:27:19 2009   show details
 
Priority: None
State: None
Finding: None
Owner: None
  edit properties

Legend [ X ]
Warning Location
Contributes
Parse Error
Other Warning
Two or More Loop Iterations
On Execution Path
Comment
Macro
Preprocessor
Include
Keyword
Preprocessed Away
Legend
Warning Location Contributes Parse Error
Other Warning Two or More Loop Iterations On Execution Path
Comment Macro Preprocessor
Include Keyword Preprocessed Away

Source  |  Language: C Hide Legend     
ProblemLineSource
   /kat0/fletcher/SATE/2010/pvm3/src/pvmd.c
   Enter clear_opq_of
 1674 clear_opq_of(tid) 
 1675         int tid;                        /* host */ 
 1676 {
 1677         struct pkt *pp, *pp2;
 1678  
 1679         for (pp = opq->pk_tlink; pp != opq; pp = pp->pk_tlink) {
true1680                 if (pp->pk_dst == tid && !pp->pk_link) {   /* Use After Free (ID: 22029.28668) */
 1681                         pp2 = pp->pk_trlink;
 1682                         LISTDELETE(pp, pk_tlink, pk_trlink);   /* Null Pointer Dereference (ID: 22030.28669) */
pp->pk_link <= 40951683                         pk_free(pp);
     /kat0/fletcher/SATE/2010/pvm3/src/pkt.c
     Enter clear_opq_of / pk_free
 142   pk_free(pp) 
 143           struct pkt *pp;
 144   {
 145           struct pkt *pp2, *pp3;
 146    
 147           if (pp->pk_buf) {               /* slave pkt */ 
 148                   if (pp->pk_tlink) {
 149                           LISTDELETE(pp, pk_tlink, pk_trlink);
 150                   }
 151                   da_unref(pp->pk_buf);
 152    
 153           } else {                                /* master pkt */ 
 154    
 155           /* free all pkts in chain */ 
pp->pk_link <= 4095156                   for (pp2 = pp->pk_link; pp2 != pp; pp2 = pp3) {
pp2 <= 4095157                           pp3 = pp2->pk_link;     /* Null Pointer Dereference */
     Exit clear_opq_of / pk_free
 1684                         pp = pp2;
Preconditions 
((char*)&((char*)$unknown_76863)[8])[16] = 0
((char*)&((char*)$unknown_76863)[8])[8] != opq
opq->pk_tlink != opq
((char*)$unknown_76863)[8] = 0
((char*)&$unknown_76863)[8] != opq
Postconditions 
((char*)&((char*)((char*)$unknown_76863)[8])[8])[12]' = ((char*)&((char*)$unknown_76863)[8])[12]
((char*)&((char*)((char*)$unknown_76863)[8])[12])[8]' = ((char*)&((char*)$unknown_76863)[8])[8]
((char*)&((char*)$unknown_76863)[8])[8]' = 0
((char*)&((char*)$unknown_76863)[8])[12]' = 0
pp' = ((char*)&$unknown_76863)[8]
pp' = ((char*)&$unknown_76863)[8]
pp2' = ((char*)$unknown_76863)[8]
pp2' = ((char*)&((char*)$unknown_76863)[8])[12]



Change Warning 79.28667 : Null Pointer Dereference

Priority:
State:
Finding:
Owner:
Note: