(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcom.c) |
| |
| 1307 | | | dissect_dcom_VARIANT(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 1308 | | | proto_tree *tree, guint8 *drep, int hfindex) |
| 1309 | | | { |
| 1310 | | | guint32 u32Size; |
| 1311 | | | guint32 u32RPCRes; |
| 1312 | | | guint16 u16Res; |
| 1313 | | | guint32 u32SubStart; |
| 1314 | | | proto_item *sub_item; |
| 1315 | | | proto_tree *sub_tree; |
| 1316 | | | guint16 u16VarType; |
| 1317 | | | guint32 u32VarType; |
| 1318 | | | |
| 1319 | | | guint8 u8Data; |
| 1320 | | | guint16 u16Data; |
| 1321 | | | guint32 u32Data; |
| 1322 | | | gchar cData[500]; |
| 1323 | | | guint32 u32Pointer; |
| 1324 | | | gfloat f32Data; |
| 1325 | | | gdouble f64Data; |
| 1326 | | | |
| 1327 | | | |
| 1328 | | | |
| 1329 | | | if (offset % 8) { |
Event 1:
Skipping " if". offset % 8 evaluates to false.
hide
|
|
| 1330 | | | offset += 8 - (offset % 8); |
| 1331 | | | } |
| 1332 | | | |
| 1333 | | | sub_item = proto_tree_add_item(tree, hfindex, tvb, offset, 0, FALSE); |
| 1334 | | | sub_tree = proto_item_add_subtree(sub_item, ett_dcom_variant); |
| 1335 | | | u32SubStart = offset; |
| 1336 | | | |
| 1337 | | | |
| 1338 | | | |
| 1339 | | | |
| 1340 | | | |
| 1341 | | | |
| 1342 | | | |
| 1343 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep, |
| 1344 | | | hf_dcom_variant_size, &u32Size); |
| 1345 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep, |
| 1346 | | | hf_dcom_variant_rpc_res, &u32RPCRes); |
| 1347 | | | offset = dissect_dcom_VARTYPE(tvb, offset, pinfo, sub_tree, drep, |
| 1348 | | | &u16VarType); |
| 1349 | | | offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep, |
| 1350 | | | hf_dcom_variant_wres, &u16Res); |
| 1351 | | | offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep, |
| 1352 | | | hf_dcom_variant_wres, &u16Res); |
| 1353 | | | offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep, |
| 1354 | | | hf_dcom_variant_wres, &u16Res); |
| 1355 | | | |
| 1356 | | | |
| 1357 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep, |
| 1358 | [+] | | hf_dcom_variant_type32, &u32VarType); |
Event 2:
dissect_ndr_uint32() does not initialize u32VarType. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 1359 | | | |
| 1360 | | | if (u32VarType & WIRESHARK_VT_BYREF) { |
Uninitialized Variable
u32VarType was not initialized. The issue can occur if the highlighted code executes. See related event 2. Show: All events | Only primary events |
|
| |