(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 3652 | | | static int SpoolssEnumForms_r(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 3653 | | | proto_tree *tree, guint8 *drep _U_) |
| 3654 | | | { |
| 3655 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 3656 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 3657 | | | BUFFER buffer; |
| 3658 | | | guint32 level = GPOINTER_TO_UINT(dcv->se_data), i, count; |
| 3659 | | | int buffer_offset; |
| 3660 | | | proto_item *hidden_item; |
| 3661 | | | |
| 3662 | | | hidden_item = proto_tree_add_uint( |
| 3663 | | | tree, hf_form, tvb, offset, 0, 1); |
| 3664 | | | PROTO_ITEM_SET_HIDDEN(hidden_item);
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
319 | #define PROTO_ITEM_SET_HIDDEN(proto_item) \ |
320 | ((proto_item) ? FI_SET_FLAG((proto_item)->finfo, FI_HIDDEN) : 0) |
| |
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
246 | #define FI_SET_FLAG(fi, flag) (fi->flags = fi->flags | flag) |
| |
|
Event 1:
hidden_item evaluates to false.
hide
|
|
| 3665 | | | |
| 3666 | | | |
| 3667 | | | |
| 3668 | | | offset = dissect_spoolss_buffer( |
| 3669 | | | tvb, offset, pinfo, tree, drep, &buffer); |
| 3670 | | | |
| 3671 | | | offset = dissect_ndr_uint32( |
| 3672 | | | tvb, offset, pinfo, tree, drep, hf_needed, NULL); |
| 3673 | | | |
| 3674 | [+] | | if (check_col(pinfo->cinfo, COL_INFO)) |
 |
| 3675 | | | col_append_fstr(pinfo->cinfo, COL_INFO, ", level %d", level); |
| 3676 | | | |
| 3677 | | | offset = dissect_ndr_uint32( |
| 3678 | [+] | | tvb, offset, pinfo, tree, drep, hf_enumforms_num, &count); |
Event 4:
dissect_ndr_uint32() does not initialize count. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 3679 | | | |
| 3680 | | | |
| 3681 | | | |
| 3682 | | | |
| 3683 | | | |
| 3684 | | | |
| 3685 | | | buffer_offset = 0; |
| 3686 | | | |
| 3687 | | | for (i = 0; i < count; i++) { |
Uninitialized Variable
count was not initialized. The issue can occur if the highlighted code executes. See related event 4. Show: All events | Only primary events |
|
| |