|
| 1 | +Error: FORWARD_NULL (CWE-476): |
| 2 | +kernel-999/arch/x86/boot/compressed/kaslr.c:266:2: path: Condition "!args", taking false branch. |
| 3 | +kernel-999/arch/x86/boot/compressed/kaslr.c:271:2: path: Condition "!tmp_cmdline", taking false branch. |
| 4 | +kernel-999/arch/x86/boot/compressed/kaslr.c:281:2: path: Condition "*args", taking true branch. |
| 5 | +kernel-999/arch/x86/boot/compressed/kaslr.c:284:3: path: Condition "!val", taking false branch. |
| 6 | +kernel-999/arch/x86/boot/compressed/kaslr.c:287:3: path: Condition "!strcmp(param, "memmap")", taking true branch. |
| 7 | +kernel-999/arch/x86/boot/compressed/kaslr.c:289:3: path: Falling through to end of if statement. |
| 8 | +kernel-999/arch/x86/boot/compressed/kaslr.c:305:2: path: Jumping back to the beginning of the loop. |
| 9 | +kernel-999/arch/x86/boot/compressed/kaslr.c:281:2: path: Condition "*args", taking true branch. |
| 10 | +kernel-999/arch/x86/boot/compressed/kaslr.c:284:3: path: Condition "!val", taking true branch. |
| 11 | +kernel-999/arch/x86/boot/compressed/kaslr.c:284:3: var_compare_op: Comparing "val" to null implies that "val" might be null. |
| 12 | +kernel-999/arch/x86/boot/compressed/kaslr.c:284:3: path: Condition "strcmp(param, "--") == 0", taking false branch. |
| 13 | +kernel-999/arch/x86/boot/compressed/kaslr.c:287:3: path: Condition "!strcmp(param, "memmap")", taking false branch. |
| 14 | +kernel-999/arch/x86/boot/compressed/kaslr.c:289:10: path: Condition "1", taking true branch. |
| 15 | +kernel-999/arch/x86/boot/compressed/kaslr.c:289:10: path: Condition "strstr(param, "hugepages")", taking false branch. |
| 16 | +kernel-999/arch/x86/boot/compressed/kaslr.c:291:10: path: Condition "!strcmp(param, "mem")", taking true branch. |
| 17 | +kernel-999/arch/x86/boot/compressed/kaslr.c:292:4: alias_transfer: Assigning: "p" = "val". |
| 18 | +kernel-999/arch/x86/boot/compressed/kaslr.c:294:4: var_deref_model: Passing null pointer "p" to "strcmp", which dereferences it. [Note: The source code implementation of the function has been overridden by a builtin model.] |
| 19 | +# 292| char *p = val; |
| 20 | +# 293| |
| 21 | +# 294|-> if (!strcmp(p, "nopentium")) |
| 22 | +# 295| continue; |
| 23 | +# 296| mem_size = memparse(p, &p); |
0 commit comments