(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-iwarp-mpa.c) |
| |
| 830 | | | dissect_iwarp_mpa(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) |
| 831 | | | { |
| 832 | | | tvbuff_t *next_tvb = NULL; |
| 833 | | | conversation_t *conversation = NULL; |
| 834 | | | mpa_state_t *state = NULL; |
| 835 | | | struct tcpinfo *tcpinfo = NULL; |
| 836 | | | guint8 endpoint = 3; |
| 837 | | | guint16 ulpdu_length = 0; |
| 838 | | | |
| 839 | | | |
| 840 | [+] | | if (tvb_length(tvb) >= MPA_SMALLEST_FPDU_LEN && is_mpa_fpdu(pinfo)) { |
Event 1:
Skipping " if". tvb_length(tvb) >= 8 evaluates to true.
hide
|
|
 |
| 841 | | | |
| 842 | | | tcpinfo = pinfo->private_data; |
| 843 | | | |
| 844 | | | conversation = find_conversation(pinfo->fd->num, &pinfo->src, |
| 845 | | | &pinfo->dst, pinfo->ptype, pinfo->srcport, pinfo->destport, 0); |
| 846 | | | |
| 847 | [+] | | state = get_mpa_state(conversation); |
 |
| 848 | | | |
| 849 | | | if (pinfo->srcport == state->minfo[MPA_INITIATOR].port) { |
Null Pointer Dereference
state is dereferenced here, but it is NULL. The issue can occur if the highlighted code executes. See related event 10. Show: All events | Only primary events |
|
| |