(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 3435 | | | dissect_SPOOL_PRINTER_INFO(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 3436 | | | proto_tree *tree, guint8 *drep) |
| 3437 | | | { |
| 3438 | | | proto_item *item; |
| 3439 | | | proto_tree *subtree; |
| 3440 | | | guint32 level; |
| 3441 | | | |
| 3442 | | | item = proto_tree_add_text( |
| 3443 | | | tree, tvb, offset, 0, "Spool printer info level"); |
| 3444 | | | |
| 3445 | | | subtree = proto_item_add_subtree(item, ett_SPOOL_PRINTER_INFO_LEVEL); |
| 3446 | | | |
| 3447 | | | offset = dissect_ndr_uint32( |
| 3448 | | | tvb, offset, pinfo, subtree, drep, hf_level, &level); |
| 3449 | | | |
| 3450 | | | switch(level) { |
Event 1:
level evaluates to 3.
hide
|
|
| 3451 | | | case 3: { |
| 3452 | | | guint32 devmode_ptr, secdesc_ptr; |
| 3453 | | | |
| 3454 | | | |
| 3455 | | | |
| 3456 | | | |
| 3457 | | | |
| 3458 | | | offset = dissect_ndr_uint32( |
| 3459 | | | tvb, offset, pinfo, subtree, drep, |
| 3460 | | | hf_spool_printer_info_devmode_ptr, |
| 3461 | [+] | | &devmode_ptr); |
Event 2:
dissect_ndr_uint32() does not initialize devmode_ptr. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 3462 | | | |
| 3463 | | | offset = dissect_ndr_uint32( |
| 3464 | | | tvb, offset, pinfo, subtree, drep, |
| 3465 | | | hf_spool_printer_info_secdesc_ptr, |
| 3466 | | | &secdesc_ptr); |
| 3467 | | | |
| 3468 | | | if (devmode_ptr) |
Uninitialized Variable
devmode_ptr was not initialized. The issue can occur if the highlighted code executes. See related event 2. Show: All events | Only primary events |
|
| |