(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-dcerpc-spoolss.c) |
| |
| 4326 | | | static int SpoolssGetForm_q(tvbuff_t *tvb, int offset, packet_info *pinfo, |
| 4327 | | | proto_tree *tree, guint8 *drep _U_) |
| 4328 | | | { |
| 4329 | | | dcerpc_info *di = (dcerpc_info *)pinfo->private_data; |
| 4330 | | | dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data; |
| 4331 | | | proto_item *hidden_item; |
| 4332 | | | guint32 level; |
| 4333 | | | char *name; |
| 4334 | | | |
| 4335 | | | hidden_item = proto_tree_add_uint( |
| 4336 | | | tree, hf_form, tvb, offset, 0, 1); |
| 4337 | | | PROTO_ITEM_SET_HIDDEN(hidden_item);
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
319 | #define PROTO_ITEM_SET_HIDDEN(proto_item) \ |
320 | ((proto_item) ? FI_SET_FLAG((proto_item)->finfo, FI_HIDDEN) : 0) |
| |
x /home/sate/Testcases/c/cve/wireshark-1.2.0/epan/proto.h |
| |
246 | #define FI_SET_FLAG(fi, flag) (fi->flags = fi->flags | flag) |
| |
|
Event 1:
hidden_item evaluates to true.
hide
|
|
| 4338 | | | |
| 4339 | | | |
| 4340 | | | |
| 4341 | | | offset = dissect_nt_policy_hnd( |
| 4342 | | | tvb, offset, pinfo, tree, drep, hf_hnd, NULL, NULL, |
| 4343 | | | FALSE, FALSE); |
| 4344 | | | |
| 4345 | | | offset = dissect_ndr_cvstring( |
| 4346 | | | tvb, offset, pinfo, tree, drep, |
| 4347 | | | sizeof(guint16), hf_form_name, TRUE, &name); |
Event 2:
!0 evaluates to true.
hide
|
|
| 4348 | | | |
| 4349 | [+] | | if (check_col(pinfo->cinfo, COL_INFO)) |
 |
| 4350 | | | col_append_fstr(pinfo->cinfo, COL_INFO, ", %s", name); |
| 4351 | | | |
| 4352 | | | offset = dissect_ndr_uint32( |
| 4353 | [+] | | tvb, offset, pinfo, tree, drep, hf_form_level, &level); |
Event 6:
dissect_ndr_uint32() does not initialize level. - This may be because of a failure case or other special case for dissect_ndr_uint32().
hide
|
|
 |
| 4354 | | | |
| 4355 | | | |
| 4356 | | | if(!pinfo->fd->flags.visited){ |
Event 8:
Skipping " if". pinfo->fd->flags.visited evaluates to true.
hide
|
|
| 4357 | | | dcv->se_data = GUINT_TO_POINTER((int)level); |
| 4358 | | | } |
| 4359 | | | |
| 4360 | | | if (check_col(pinfo->cinfo, COL_INFO)) |
Event 9:
Taking true branch. check_col(...) evaluates to true.
hide
|
|
| 4361 | | | col_append_fstr(pinfo->cinfo, COL_INFO, ", level %d", |
| 4362 | | | level); |
Uninitialized Variable
level was not initialized. The issue can occur if the highlighted code executes. See related event 6. Show: All events | Only primary events |
|
| |