(/home/sate/Testcases/c/cve/dovecot-1.2.0/src/imap/cmd-thread.c) |
| |
| 10 | | | static int imap_thread_write(struct mail_thread_iterate_context *iter, |
| 11 | | | string_t *str, bool root) |
| 12 | | | { |
| 13 | | | const struct mail_thread_child_node *node; |
| 14 | | | struct mail_thread_iterate_context *child_iter; |
| 15 | | | unsigned int count; |
| 16 | | | int ret = 0; |
| 17 | | | |
| 18 | [+] | | count = mail_thread_iterate_count(iter); |
 |
| 19 | | | if (count == 0) |
Event 1:
Skipping " if". count == 0 evaluates to false.
hide
|
|
| 20 | | | return 0; |
| 21 | | | |
| 22 | | | if (count == 1 && !root) { |
| 23 | | | |
| 24 | [+] | | node = mail_thread_iterate_next(iter, &child_iter); |
 |
| 25 | | | str_printfa(str, "%u", node->uid); |
Null Pointer Dereference
node is dereferenced here, but it is NULL. The issue can occur if the highlighted code executes. See related event 5. Show: All events | Only primary events |
|
| |