Bug Summary

File:src/SetFPath.c
Location:line 64, column 4
Description:Null pointer passed as an argument to a 'nonnull' parameter

Annotated Source Code

1/*
2
3Copyright 1986, 1998 The Open Group
4
5Permission to use, copy, modify, distribute, and sell this software and its
6documentation for any purpose is hereby granted without fee, provided that
7the above copyright notice appear in all copies and that both that
8copyright notice and this permission notice appear in supporting
9documentation.
10
11The above copyright notice and this permission notice shall be included in
12all copies or substantial portions of the Software.
13
14THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
16FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
17OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
18AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
21Except as contained in this notice, the name of The Open Group shall not be
22used in advertising or otherwise to promote the sale, use or other dealings
23in this Software without prior written authorization from The Open Group.
24
25*/
26
27#ifdef HAVE_CONFIG_H1
28#include <config.h>
29#endif
30#include "Xlibint.h"
31
32#define safestrlen(s)((s) ? strlen(s) : 0) ((s) ? strlen(s) : 0)
33
34int
35XSetFontPath (
36 register Display *dpy,
37 char **directories,
38 int ndirs)
39{
40 register int n = 0;
41 register int i;
42 register int nbytes;
43 char *p;
44 register xSetFontPathReq *req;
45 int retCode;
46
47 LockDisplay(dpy)if ((dpy)->lock_fns) (*(dpy)->lock_fns->lock_display
)(dpy);
48 GetReq (SetFontPath, req)req = (xSetFontPathReq *) _XGetRequest(dpy, 51, 8);
49 req->nFonts = ndirs;
50 for (i = 0; i < ndirs; i++) {
1
Assuming 'i' is < 'ndirs'
2
Loop condition is true. Entering loop body
3
Assuming 'i' is >= 'ndirs'
4
Loop condition is false. Execution continues on line 53
51 n += safestrlen (directories[i])((directories[i]) ? strlen(directories[i]) : 0) + 1;
52 }
53 nbytes = (n + 3) & ~3;
54 req->length += nbytes >> 2;
55 if ((p = (char *) Xmalloc ((unsigned) nbytes)malloc((((unsigned) nbytes) == 0 ? 1 : ((unsigned) nbytes))))) {
5
Assuming 'p' is not null
6
Taking true branch
56 /*
57 * pack into counted strings.
58 */
59 char *tmp = p;
60
61 for (i = 0; i < ndirs; i++) {
7
Loop condition is true. Entering loop body
62 register int length = safestrlen (directories[i])((directories[i]) ? strlen(directories[i]) : 0);
63 *p = length;
64 memcpy (p + 1, directories[i], length);
8
Null pointer passed as an argument to a 'nonnull' parameter
65 p += length + 1;
66 }
67 Data (dpy, tmp, nbytes){ if (dpy->bufptr + (nbytes) <= dpy->bufmax) { memcpy
(dpy->bufptr, tmp, (int)nbytes); dpy->bufptr += ((nbytes
) + 3) & ~3; } else _XSend(dpy, tmp, nbytes); };
68 Xfree ((char *) tmp)free(((char *) tmp));
69 retCode = 1;
70 }
71 else
72 retCode = 0;
73
74 UnlockDisplay(dpy)if ((dpy)->lock_fns) (*(dpy)->lock_fns->unlock_display
)(dpy);
75 SyncHandle()if (dpy->synchandler) (*dpy->synchandler)(dpy);
76 return (retCode);
77}