(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcom.c) |
| |
| 677 | | | dissect_dcom_extent(tvbuff_t *tvb, int offset, |
| 678 | | | packet_info *pinfo, proto_tree *tree, guint8 *drep) |
| 679 | | | { |
| 680 | | | guint32 u32ArraySize; |
| 681 | | | guint32 u32ArraySize2; |
| 682 | | | guint32 u32Pointer; |
| 683 | | | guint32 u32VariableOffset; |
| 684 | | | guint32 u32Idx; |
| 685 | | | guint32 u32SubStart; |
| 686 | | | proto_item *sub_item; |
| 687 | | | proto_tree *sub_tree; |
| 688 | | | |
| 689 | | | guint32 u32ArrayCount; |
| 690 | | | guint32 u32ArrayRes; |
| 691 | | | |
| 692 | | | guint32 u32ExtentSize; |
| 693 | | | e_uuid_t uuidExtend; |
| 694 | | | const char *uuid_name; |
| 695 | | | |
| 696 | | | |
| 697 | | | offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep, &u32Pointer); |
| 698 | | | |
| 699 | | | if (u32Pointer == 0) { |
Event 1:
Skipping " if". u32Pointer == 0 evaluates to false.
hide
|
|
| 700 | | | return offset; |
| 701 | | | } |
| 702 | | | |
| 703 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep, |
| 704 | | | hf_dcom_extent_array_count, &u32ArrayCount); |
| 705 | | | offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep, |
| 706 | | | hf_dcom_extent_array_res, &u32ArrayRes); |
| 707 | | | |
| 708 | | | offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep, &u32Pointer); |
| 709 | | | |
| 710 | | | if (u32Pointer == 0) { |
Event 2:
Skipping " if". u32Pointer == 0 evaluates to false.
hide
|
|
| 711 | | | return offset; |
| 712 | | | } |
| 713 | | | |
| 714 | | | offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep, |
| 715 | [+] | | &u32ArraySize); |
Event 3:
dissect_dcom_dcerpc_array_size() does not initialize u32ArraySize. - This may be because of a failure case or other special case for dissect_dcom_dcerpc_array_size().
hide
|
|
 |
| 716 | | | |
| 717 | | | u32VariableOffset = offset + u32ArraySize*4; |
Uninitialized Variable
u32ArraySize was not initialized. The issue can occur if the highlighted code executes. See related events 3 and 5. Show: All events | Only primary events |
|
| |