(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-netbios.c) |
| |
| 443 | | | static void netbios_no_receive_flags( tvbuff_t *tvb, proto_tree *tree, |
| 444 | | | int offset) |
| 445 | | | |
| 446 | | | { |
| 447 | | | proto_tree *field_tree; |
| 448 | | | proto_item *tf; |
| 449 | | | guint flags = tvb_get_guint8( tvb, offset); |
| 450 | | | |
| 451 | | | |
| 452 | | | |
| 453 | | | tf = proto_tree_add_text(tree, tvb, offset, 1, |
| 454 | | | "Flags: 0x%02x", flags); |
| 455 | | | |
| 456 | | | if (flags & 0x02) { |
Event 1:
Taking true branch. flags & 2 evaluates to true.
hide
|
|
| 457 | | | field_tree = proto_item_add_subtree(tf, ett_netb_flags); |
| 458 | | | proto_tree_add_text(field_tree, tvb, offset, 1, "%s", |
| 459 | | | decode_boolean_bitfield(flags, 0x02, 8, |
| 460 | [+] | | "SEND.NO.ACK data not received", NULL)); |
Event 2:
NULL is passed to decode_boolean_bitfield() as the fifth argument. - Dereferenced later, causing the null pointer dereference.
hide
|
|
 |
| |