(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-per.c) |
| |
| 242 | | | dissect_per_open_type_internal(tvbuff_t *tvb, guint32 offset, asn1_ctx_t *actx, proto_tree *tree, int hf_index, void* type_cb, asn1_cb_variant variant) |
| 243 | | | { |
| 244 | | | guint32 type_length, end_offset; |
| 245 | | | tvbuff_t *val_tvb = NULL; |
| 246 | | | *hfi; |
| 247 | | | proto_tree *subtree = tree; |
| 248 | | | |
| 249 | | | hfi = (hf_index == -1) ? NULL : proto_registrar_get_nth(hf_index); |
Event 1:
hf_index == -1 evaluates to true.
hide
|
|
| 250 | | | |
| 251 | [+] | | offset = dissect_per_length_determinant(tvb, offset, actx, tree, hf_per_open_type_length, &type_length); |
Event 2:
dissect_per_length_determinant() does not initialize type_length. - This may be because of a failure case or other special case for dissect_per_length_determinant().
hide
|
|
 |
| 252 | | | if (actx->aligned) BYTE_ALIGN_OFFSET(offset);
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-per.c |
| |
120 | #define BYTE_ALIGN_OFFSET(offset) if(offset&0x07){offset=(offset&0xfffffff8)+8;} |
| |
|
Event 9:
Taking true branch. actx->aligned evaluates to true.
hide
Event 10:
Skipping " if". offset & 7 evaluates to false.
hide
|
|
| 253 | | | end_offset = offset + type_length * 8; |
Uninitialized Variable
type_length was not initialized. The issue can occur if the highlighted code executes. See related event 2. Show: All events | Only primary events |
|
| |