clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name popen.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/libexec/ftpd/obj -resource-dir /usr/local/lib/clang/13.0.0 -I /usr/src/libexec/ftpd -I /usr/src/libexec/ftpd/../../bin/ls -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/libexec/ftpd/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/libexec/ftpd/popen.c
1 | |
2 | |
3 | |
4 | |
5 | |
6 | |
7 | |
8 | |
9 | |
10 | |
11 | |
12 | |
13 | |
14 | |
15 | |
16 | |
17 | |
18 | |
19 | |
20 | |
21 | |
22 | |
23 | |
24 | |
25 | |
26 | |
27 | |
28 | |
29 | |
30 | |
31 | |
32 | |
33 | |
34 | |
35 | |
36 | |
37 | #include <sys/types.h> |
38 | #include <sys/wait.h> |
39 | |
40 | #include <errno.h> |
41 | #include <glob.h> |
42 | #include <limits.h> |
43 | #include <signal.h> |
44 | #include <stdio.h> |
45 | #include <stdlib.h> |
46 | #include <string.h> |
47 | #include <syslog.h> |
48 | #include <unistd.h> |
49 | |
50 | #include <netinet/in.h> |
51 | |
52 | #include "monitor.h" |
53 | #include "extern.h" |
54 | |
55 | |
56 | |
57 | |
58 | |
59 | |
60 | |
61 | FILE * |
62 | ftpd_ls(const char *path, pid_t *pidptr) |
63 | { |
64 | char *cp; |
65 | FILE *iop; |
66 | int argc = 0, pdes[2]; |
67 | pid_t pid; |
68 | char **pop, *argv[_POSIX_ARG_MAX]; |
69 | |
70 | if (pipe(pdes) == -1) |
| 1 | Assuming the condition is false | |
|
| |
71 | return (NULL); |
72 | |
73 | |
74 | argv[argc++] = "/bin/ls"; |
75 | argv[argc++] = "-lgA"; |
76 | argv[argc++] = "--"; |
77 | |
78 | |
79 | if (path != NULL) { |
| 3 | | Assuming 'path' is not equal to NULL | |
|
| |
80 | glob_t gl; |
81 | |
82 | memset(&gl, 0, sizeof(gl)); |
83 | if (glob(path, |
| 5 | | Assuming the condition is false | |
|
| |
84 | GLOB_BRACE|GLOB_NOCHECK|GLOB_QUOTE|GLOB_TILDE|GLOB_LIMIT, |
85 | NULL, &gl)) { |
86 | fatal ("Glob error."); |
87 | } else if (gl.gl_pathc > 0) { |
| 7 | | Assuming field 'gl_pathc' is > 0 | |
|
| |
88 | for (pop = gl.gl_pathv; *pop && argc < _POSIX_ARG_MAX-1; |
| 9 | | Assuming the condition is true | |
|
| 10 | | Loop condition is true. Entering loop body | |
|
| 13 | | Assuming the condition is true | |
|
| 14 | | Loop condition is true. Entering loop body | |
|
| 18 | | Assuming the condition is false | |
|
89 | pop++) { |
90 | argv[argc++] = strdup(*pop); |
| |
91 | if (argv[argc - 1] == NULL) |
| 11 | | Assuming the condition is true | |
|
| |
| 16 | | Assuming the condition is false | |
|
| |
92 | fatal ("Out of memory."); |
93 | } |
94 | } |
95 | globfree(&gl); |
96 | } |
97 | argv[argc] = NULL; |
98 | |
99 | iop = NULL; |
100 | |
101 | switch (pid = fork()) { |
| 19 | | Control jumps to 'case -1:' at line 102 | |
|
102 | case -1: |
103 | (void)close(pdes[0]); |
104 | (void)close(pdes[1]); |
105 | goto pfree; |
| 20 | | Control jumps to line 128 | |
|
106 | |
107 | case 0: |
108 | if (pdes[1] != STDOUT_FILENO) { |
109 | dup2(pdes[1], STDOUT_FILENO); |
110 | (void)close(pdes[1]); |
111 | } |
112 | dup2(STDOUT_FILENO, STDERR_FILENO); |
113 | (void)close(pdes[0]); |
114 | closelog(); |
115 | |
116 | extern int ls_main(int, char **); |
117 | |
118 | |
119 | optreset = optind = 1; |
120 | exit(ls_main(argc, argv)); |
121 | } |
122 | |
123 | iop = fdopen(pdes[0], "r"); |
124 | (void)close(pdes[1]); |
125 | *pidptr = pid; |
126 | |
127 | pfree: |
128 | for (argc = 3; argv[argc] != NULL; argc++) |
| 21 | | Loop condition is false. Execution continues on line 131 | |
|
129 | free(argv[argc]); |
130 | |
131 | return (iop); |
| |
132 | } |
133 | |
134 | int |
135 | ftpd_pclose(FILE *iop, pid_t pid) |
136 | { |
137 | int status; |
138 | pid_t rv; |
139 | sigset_t sigset, osigset; |
140 | |
141 | (void)fclose(iop); |
142 | sigemptyset(&sigset); |
143 | sigaddset(&sigset, SIGINT); |
144 | sigaddset(&sigset, SIGQUIT); |
145 | sigaddset(&sigset, SIGHUP); |
146 | sigprocmask(SIG_BLOCK, &sigset, &osigset); |
147 | while ((rv = waitpid(pid, &status, 0)) == -1 && errno == EINTR) |
148 | continue; |
149 | sigprocmask(SIG_SETMASK, &osigset, NULL); |
150 | if (rv == -1) |
151 | return (-1); |
152 | if (WIFEXITED(status)) |
153 | return (WEXITSTATUS(status)); |
154 | return (1); |
155 | } |