(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 4521 | | | dissect_spoolss_JOB_INFO_2(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 4522 | | | proto_tree *tree, guint8 *drep) |
| 4523 | | | { |
| 4524 | | | proto_item *item; |
| 4525 | | | proto_tree *subtree; |
| 4526 | | | int struct_start = offset; |
| 4527 | | | char *document_name; |
| 4528 | | | guint32 devmode_offset, secdesc_offset; |
| 4529 | | | |
| 4530 | | | item = proto_tree_add_text(tree, tvb, offset, 0, "Job info level 2"); |
| 4531 | | | |
| 4532 | | | subtree = proto_item_add_subtree(item, ett_JOB_INFO_2); |
| 4533 | | | |
| 4534 | | | offset = dissect_ndr_uint32(tvb, offset, pinfo, subtree, drep, |
| 4535 | | | hf_job_id, NULL); |
| 4536 | | | |
| 4537 | | | offset = dissect_spoolss_relstr( |
| 4538 | | | tvb, offset, pinfo, subtree, drep, hf_printername, |
| 4539 | | | struct_start, NULL); |
| 4540 | | | |
| 4541 | | | offset = dissect_spoolss_relstr( |
| 4542 | | | tvb, offset, pinfo, subtree, drep, hf_machinename, |
| 4543 | | | struct_start, NULL); |
| 4544 | | | |
| 4545 | | | offset = dissect_spoolss_relstr( |
| 4546 | | | tvb, offset, pinfo, subtree, drep, hf_username, |
| 4547 | | | struct_start, NULL); |
| 4548 | | | |
| 4549 | | | offset = dissect_spoolss_relstr( |
| 4550 | | | tvb, offset, pinfo, subtree, drep, hf_documentname, |
| 4551 | | | struct_start, &document_name); |
| 4552 | | | |
| 4553 | | | proto_item_append_text(item, ": %s", document_name); |
| 4554 | | | g_free(document_name); |
| 4555 | | | |
| 4556 | | | offset = dissect_spoolss_relstr( |
| 4557 | | | tvb, offset, pinfo, subtree, drep, hf_notifyname, |
| 4558 | | | struct_start, NULL); |
| 4559 | | | |
| 4560 | | | offset = dissect_spoolss_relstr( |
| 4561 | | | tvb, offset, pinfo, subtree, drep, hf_datatype, |
| 4562 | | | struct_start, NULL); |
| 4563 | | | |
| 4564 | | | offset = dissect_spoolss_relstr( |
| 4565 | | | tvb, offset, pinfo, subtree, drep, hf_printprocessor, |
| 4566 | | | struct_start, NULL); |
| 4567 | | | |
| 4568 | | | offset = dissect_spoolss_relstr( |
| 4569 | | | tvb, offset, pinfo, subtree, drep, hf_parameters, |
| 4570 | | | struct_start, NULL); |
| 4571 | | | |
| 4572 | | | offset = dissect_spoolss_relstr( |
| 4573 | | | tvb, offset, pinfo, subtree, drep, hf_drivername, |
| 4574 | | | struct_start, NULL); |
| 4575 | | | |
| 4576 | | | offset = dissect_ndr_uint32( |
| 4577 | | | tvb, offset, pinfo, NULL, drep, hf_offset, |
| 4578 | [+] | | &devmode_offset); |
Event 2:
dissect_ndr_uint32() does not initialize devmode_offset. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 4579 | | | |
| 4580 | | | dissect_DEVMODE( |
| 4581 | | | tvb, devmode_offset - 4 + struct_start, pinfo, subtree, drep); |
Uninitialized Variable
devmode_offset was not initialized. The issue can occur if the highlighted code executes. See related event 2. Show: All events | Only primary events |
|
| |