(/home/sate/Testcases/c/cve/wireshark-1.2.0/plugins/profinet/packet-dcom-cba-acco.c) |
| |
| 3971 | | | dissect_ICBAAccoMgt2_DiagConsConnections_resp(tvbuff_t *tvb, int offset, |
| 3972 | | | packet_info *pinfo, proto_tree *tree, guint8 *drep) |
| 3973 | | | { |
| 3974 | | | guint32 u32Count; |
| 3975 | | | guint32 u32TmpCount; |
| 3976 | | | guint32 u32Pointer; |
| 3977 | | | guint32 u32HResult; |
| 3978 | | | guint8 u8State; |
| 3979 | | | guint16 u16Persistence; |
| 3980 | | | guint16 u16ConnVersion; |
| 3981 | | | proto_item *sub_item; |
| 3982 | | | proto_tree *sub_tree; |
| 3983 | | | proto_item *state_item; |
| 3984 | | | guint32 u32SubStart; |
| 3985 | | | guint32 u32Idx; |
| 3986 | | | guint32 u32VariableOffset; |
| 3987 | | | guint32 u32ConnErrorState; |
| 3988 | | | |
| 3989 | | | |
| 3990 | | | offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep); |
| 3991 | | | |
| 3992 | | | offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep, |
| 3993 | | | &u32Pointer); |
| 3994 | | | |
| 3995 | | | u32VariableOffset = offset; |
| 3996 | | | |
| 3997 | | | if (u32Pointer) { |
Event 1:
Taking true branch. u32Pointer evaluates to true.
hide
|
|
| 3998 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep, |
| 3999 | [+] | | hf_cba_acco_count, &u32Count); |
Event 2:
dissect_ndr_uint32() does not initialize u32Count. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 4000 | | | |
| 4001 | | | u32VariableOffset = offset + u32Count*16; |
Uninitialized Variable
u32Count was not initialized. The issue can occur if the highlighted code executes. See related event 2. Show: All events | Only primary events |
|
| |