(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 872 | | | static int SpoolssSetPrinterData_q(tvbuff_t *tvb, int offset, |
| 873 | | | packet_info *pinfo, proto_tree *tree, |
| 874 | | | guint8 *drep _U_) |
| 875 | | | { |
| 876 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 877 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 878 | | | char *value_name; |
| 879 | | | guint32 type; |
| 880 | | | proto_item *hidden_item; |
| 881 | | | |
| 882 | | | hidden_item = proto_tree_add_uint( |
| 883 | | | tree, hf_printerdata, tvb, offset, 0, 1); |
| 884 | | | PROTO_ITEM_SET_HIDDEN(hidden_item);
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
319 | #define PROTO_ITEM_SET_HIDDEN(proto_item) \ |
320 | ((proto_item) ? FI_SET_FLAG((proto_item)->finfo, FI_HIDDEN) : 0) |
| |
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
246 | #define FI_SET_FLAG(fi, flag) (fi->flags = fi->flags | flag) |
| |
|
Event 1:
hidden_item evaluates to false.
hide
|
|
| 885 | | | |
| 886 | | | |
| 887 | | | |
| 888 | | | offset = dissect_nt_policy_hnd( |
| 889 | | | tvb, offset, pinfo, tree, drep, hf_hnd, NULL, NULL, |
| 890 | | | FALSE, FALSE); |
| 891 | | | |
| 892 | | | value_name=NULL; |
| 893 | | | offset = dissect_ndr_cvstring( |
| 894 | | | tvb, offset, pinfo, tree, drep, sizeof(guint16), |
| 895 | | | hf_printerdata_value, TRUE, &value_name); |
Event 2:
!0 evaluates to true.
hide
|
|
| 896 | | | |
| 897 | | | |
| 898 | | | if(!pinfo->fd->flags.visited){ |
Event 3:
Taking true branch. pinfo->fd->flags.visited evaluates to false.
hide
|
|
| 899 | | | if(!dcv->se_data){ |
Event 4:
Skipping " if". dcv->se_data evaluates to true.
hide
|
|
| 900 | | | dcv->se_data = se_strdup_printf("%s", |
| 901 | | | value_name?value_name:""); |
| 902 | | | } |
| 903 | | | } |
| 904 | | | |
| 905 | | | |
| 906 | [+] | | if (check_col(pinfo->cinfo, COL_INFO) && dcv->se_data){ |
 |
| 907 | | | col_append_fstr(pinfo->cinfo, COL_INFO, ", %s", (char *)dcv->se_data); |
| 908 | | | } |
| 909 | | | |
| 910 | | | offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep, |
| 911 | [+] | | hf_printerdata_type, &type); |
Event 7:
dissect_ndr_uint32() does not initialize type. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 912 | | | |
| 913 | | | offset = dissect_printerdata_data( |
| 914 | | | tvb, offset, pinfo, tree, drep, type); |
Uninitialized Variable
type was not initialized. The issue can occur if the highlighted code executes. See related event 7. Show: All events | Only primary events |
|
| |