(/home/sate/Testcases/c/cve/wireshark-1.2.0/plugins/profinet/packet-dcom-cba-acco.c) |
| |
| 3389 | | | dissect_ICBAAccoServer2_GetConnectionData_resp(tvbuff_t *tvb, int offset, |
| 3390 | | | packet_info *pinfo, proto_tree *tree, guint8 *drep) |
| 3391 | | | { |
| 3392 | | | guint32 u32Length; |
| 3393 | | | guint32 u32ArraySize; |
| 3394 | | | tvbuff_t *next_tvb; |
| 3395 | | | guint32 u32Pointer; |
| 3396 | | | guint32 u32HResult; |
| 3397 | | | proto_item *item; |
| 3398 | | | dcerpc_info *info = (dcerpc_info *)pinfo->private_data; |
| 3399 | | | cba_ldev_t **call = info->call_data->private_data; |
| 3400 | | | cba_ldev_t *cons_ldev = (call!=NULL) ? *call : NULL; |
Event 1:
call != (void *)0 evaluates to true.
hide
|
|
| 3401 | | | |
| 3402 | | | |
| 3403 | | | offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep); |
| 3404 | | | |
| 3405 | | | if(cons_ldev == NULL) { |
Event 2:
Skipping " if". cons_ldev == (void *)0 evaluates to false.
hide
|
|
| 3406 | | | expert_add_info_format(pinfo, NULL, PI_UNDECODED, PI_NOTE, |
| 3407 | | | "No request info, response data ignored"); |
| 3408 | | | } |
| 3409 | | | |
| 3410 | | | item = proto_tree_add_boolean (tree, hf_cba_acco_dcom_call, tvb, offset, 0, FALSE); |
| 3411 | | | PROTO_ITEM_SET_GENERATED(item);
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
325 | #define PROTO_ITEM_SET_GENERATED(proto_item) \ |
326 | ((proto_item) ? FI_SET_FLAG((proto_item)->finfo, FI_GENERATED) : 0) |
| |
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
246 | #define FI_SET_FLAG(fi, flag) (fi->flags = fi->flags | flag) |
| |
|
Event 3:
item evaluates to false.
hide
|
|
| 3412 | | | pinfo->profinet_type = 1; |
| 3413 | | | |
| 3414 | | | |
| 3415 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep, |
| 3416 | | | hf_cba_acco_cb_length, &u32Length); |
| 3417 | | | |
| 3418 | | | offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep, |
| 3419 | [+] | | &u32Pointer); |
Event 4:
dissect_dcom_dcerpc_pointer() does not initialize u32Pointer. - This may be because of a failure case or other special case for dissect_dcom_dcerpc_pointer().
hide
|
|
 |
| 3420 | | | if (u32Pointer) { |
Uninitialized Variable
u32Pointer was not initialized. The issue can occur if the highlighted code executes. See related events 4 and 6. Show: All events | Only primary events |
|
| |