(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 2772 | | | dissect_NOTIFY_OPTION(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 2773 | | | proto_tree *tree, guint8 *drep) |
| 2774 | | | { |
| 2775 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 2776 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 2777 | | | proto_item *item; |
| 2778 | | | proto_tree *subtree; |
| 2779 | | | guint16 type; |
| 2780 | | | guint32 count; |
| 2781 | | | |
| 2782 | | | item = proto_tree_add_text(tree, tvb, offset, 0, "Notify Option"); |
| 2783 | | | |
| 2784 | | | subtree = proto_item_add_subtree(item, ett_NOTIFY_OPTION); |
| 2785 | | | |
| 2786 | | | offset = dissect_ndr_uint16(tvb, offset, pinfo, subtree, drep, |
| 2787 | | | hf_notify_option_type, &type); |
| 2788 | | | |
| 2789 | | | proto_item_append_text( |
| 2790 | | | item, ": %s", val_to_str(type, printer_notify_types, |
| 2791 | | | "Unknown (%d)")); |
| 2792 | | | |
| 2793 | | | offset = dissect_ndr_uint16(tvb, offset, pinfo, subtree, drep, |
| 2794 | | | hf_notify_option_reserved1, NULL); |
| 2795 | | | |
| 2796 | | | offset = dissect_ndr_uint32(tvb, offset, pinfo, subtree, drep, |
| 2797 | | | hf_notify_option_reserved2, NULL); |
| 2798 | | | |
| 2799 | | | offset = dissect_ndr_uint32(tvb, offset, pinfo, subtree, drep, |
| 2800 | | | hf_notify_option_reserved3, NULL); |
| 2801 | | | |
| 2802 | | | offset = dissect_ndr_uint32(tvb, offset, pinfo, subtree, drep, |
| 2803 | [+] | | hf_notify_option_count, &count); |
Event 1:
dissect_ndr_uint32() does not initialize count. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 2804 | | | |
| 2805 | | | proto_item_append_text( |
| 2806 | | | item, ", %d %s", count, notify_plural(count)); |
Uninitialized Variable
count was not initialized. The issue can occur if the highlighted code executes. See related event 1. Show: All events | Only primary events |
|
| |