(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 5573 | | | static int SpoolssEnumPrinterDrivers_r(tvbuff_t *tvb, int offset, |
| 5574 | | | packet_info *pinfo, proto_tree *tree, |
| 5575 | | | guint8 *drep) |
| 5576 | | | { |
| 5577 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 5578 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 5579 | | | guint32 level = GPOINTER_TO_UINT(dcv->se_data), num_drivers, i; |
| 5580 | | | int buffer_offset; |
| 5581 | | | BUFFER buffer; |
| 5582 | | | |
| 5583 | | | |
| 5584 | | | |
| 5585 | | | offset = dissect_spoolss_buffer(tvb, offset, pinfo, tree, drep, |
| 5586 | | | &buffer); |
| 5587 | | | |
| 5588 | | | offset = dissect_ndr_uint32( |
| 5589 | | | tvb, offset, pinfo, tree, drep, hf_needed, NULL); |
| 5590 | | | |
| 5591 | | | offset = dissect_ndr_uint32( |
| 5592 | | | tvb, offset, pinfo, tree, drep, hf_returned, |
| 5593 | [+] | | &num_drivers); |
Event 1:
dissect_ndr_uint32() does not initialize num_drivers. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 5594 | | | |
| 5595 | | | buffer_offset = 0; |
| 5596 | | | |
| 5597 | | | for (i = 0; i < num_drivers; i++) { |
Uninitialized Variable
num_drivers was not initialized. The issue can occur if the highlighted code executes. See related event 1. Show: All events | Only primary events |
|
| |