(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-ldss.c) |
| |
| 457 | | | dissect_ldss_transfer (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) |
| 458 | | | { |
| 459 | | | conversation_t *transfer_conv; |
| 460 | | | ldss_transfer_info_t *transfer_info; |
| 461 | | | struct tcpinfo *transfer_tcpinfo; |
| 462 | | | |
| 463 | | | proto_tree *ti, *line_tree = NULL, *ldss_tree = NULL; |
| 464 | | | |
| 465 | | | nstime_t broadcast_response_time; |
| 466 | | | |
| 467 | | | |
| 468 | | | |
| 469 | | | transfer_conv = find_conversation (pinfo->fd->num, &pinfo->src, &pinfo->dst, |
| 470 | | | PT_TCP, pinfo->srcport, pinfo->destport, 0); |
| 471 | [+] | | transfer_info = conversation_get_proto_data(transfer_conv, proto_ldss); |
 |
| 472 | | | transfer_tcpinfo = pinfo->private_data; |
| 473 | | | |
| 474 | | | |
| 475 | | | |
| 476 | | | |
| 477 | | | |
| 478 | | | if (transfer_tcpinfo->seq == 1 && |
Event 5:
- transfer_tcpinfo->seq == 1 evaluates to true.
- transfer_tcpinfo->lastackseq == 1 evaluates to true.
hide
|
|
| 479 | | | transfer_tcpinfo->lastackseq == 1 && |
| 480 | | | transfer_info->broadcast->message_id == MESSAGE_ID_WILLSEND) { |
Null Pointer Dereference
transfer_info is dereferenced here, but it is NULL. The issue can occur if the highlighted code executes. See related event 4. Show: All events | Only primary events |
|
| |