(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcom-remact.c) |
| |
| 132 | | | dissect_remact_remote_activation_resp(tvbuff_t *tvb, int offset, |
| 133 | | | packet_info *pinfo, proto_tree *tree, guint8 *drep) |
| 134 | | | { |
| 135 | | | guint32 u32Pointer; |
| 136 | | | e_uuid_t ipid; |
| 137 | | | guint32 u32AuthnHint; |
| 138 | | | guint16 u16VersionMajor; |
| 139 | | | guint16 u16VersionMinor; |
| 140 | | | guint32 u32HResult; |
| 141 | | | guint32 u32ArraySize; |
| 142 | | | guint32 u32Idx; |
| 143 | | | guint32 u32VariableOffset; |
| 144 | | | |
| 145 | | | |
| 146 | | | offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep); |
| 147 | | | |
| 148 | | | offset = dissect_dcom_ID(tvb, offset, pinfo, tree, drep, |
| 149 | | | hf_dcom_oxid, NULL); |
| 150 | | | offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep, |
| 151 | | | &u32Pointer); |
| 152 | | | if (u32Pointer) { |
Event 1:
Skipping " if". u32Pointer evaluates to false.
hide
|
|
| 153 | | | offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep, |
| 154 | | | &u32ArraySize); |
| 155 | | | offset = dissect_dcom_DUALSTRINGARRAY(tvb, offset, pinfo, tree, drep, |
| 156 | | | hf_remact_oxid_bindings, NULL); |
| 157 | | | } |
| 158 | | | |
| 159 | | | offset = dissect_dcom_UUID(tvb, offset, pinfo, tree, drep, |
| 160 | | | hf_dcom_ipid, &ipid); |
| 161 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep, |
| 162 | | | hf_remact_authn_hint, &u32AuthnHint); |
| 163 | | | offset = dissect_dcom_COMVERSION(tvb, offset, pinfo, tree, drep, |
| 164 | | | &u16VersionMajor, &u16VersionMinor); |
| 165 | | | |
| 166 | | | offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep, |
| 167 | | | &u32HResult); |
| 168 | | | |
| 169 | | | offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep, |
| 170 | [+] | | &u32ArraySize); |
Event 2:
dissect_dcom_dcerpc_array_size() does not initialize u32ArraySize. - This may be because of a failure case or other special case for dissect_dcom_dcerpc_array_size().
hide
|
|
 |
| 171 | | | u32VariableOffset = offset + u32ArraySize * 4; |
Uninitialized Variable
u32ArraySize was not initialized. The issue can occur if the highlighted code executes. See related events 2 and 4. Show: All events | Only primary events |
|
| |