(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 4676 | | | static int SpoolssEnumJobs_r(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 4677 | | | proto_tree *tree, guint8 *drep _U_) |
| 4678 | | | { |
| 4679 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 4680 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 4681 | | | gint16 level = GPOINTER_TO_UINT(dcv->se_data); |
| 4682 | | | BUFFER buffer; |
| 4683 | | | guint32 num_jobs, i; |
| 4684 | | | int buffer_offset; |
| 4685 | | | |
| 4686 | | | |
| 4687 | | | |
| 4688 | | | offset = dissect_spoolss_buffer( |
| 4689 | | | tvb, offset, pinfo, tree, drep, &buffer); |
| 4690 | | | |
| 4691 | | | offset = dissect_ndr_uint32( |
| 4692 | | | tvb, offset, pinfo, tree, drep, hf_needed, NULL); |
| 4693 | | | |
| 4694 | | | offset = dissect_ndr_uint32( |
| 4695 | | | tvb, offset, pinfo, tree, drep, hf_enumjobs_numjobs, |
| 4696 | [+] | | &num_jobs); |
Event 1:
dissect_ndr_uint32() does not initialize num_jobs. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 4697 | | | |
| 4698 | | | buffer_offset = 0; |
| 4699 | | | |
| 4700 | | | for (i = 0; i < num_jobs; i++) { |
Uninitialized Variable
num_jobs was not initialized. The issue can occur if the highlighted code executes. See related event 1. Show: All events | Only primary events |
|
| |