Write through uninitialized pointer

[edgar-bonet]

In mathmap_cmdline.c, the function cmdline_mathmap_get_pixel() contains something along these lines:

if (cache_entries[frame] == 0)
{
    cache_entry_t *cache_entry;  // uninitialized pointer...

    if (drawable->kind == INPUT_DRAWABLE_CMDLINE_IMAGE)
    {
        // ...conditionally initialized here:
        cache_entry = get_cache_entry_for_image(...);
        ...
    }
#ifdef MOVIES
    else
    {
        ...
    }
#endif

    // ...and unconditionally used here:
    bind_cache_entry_to_drawable(cache_entry, drawable, frame);
}

If the condition of the second if evaluates to false, the function bind_cache_entry_to_drawable() gets an uninitialized pointer. That function, however, expects the pointer to be valid, as it will use it for writing.