OpenCoverage

auth-options.c

Absolute File Name:

/home/opencoverage/opencoverage/guest-scripts/openssh/src/auth-options.c

Source code

Switch to Preprocessed file

Line Source Count

1 /* $OpenBSD: auth-options.c,v 1.83 2018/06/19 02:59:41 djm Exp $ */ -

2 /* -

4 * -

5 * Permission to use, copy, modify, and distribute this software for any -

6 * purpose with or without fee is hereby granted, provided that the above -

7 * copyright notice and this permission notice appear in all copies. -

8 * -

9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES -

10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF -

11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR -

12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES -

13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN -

14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF -

15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. -

16 */ -

17 -

18 #include "includes.h" -

19 -

20 #include <sys/types.h> -

21 -

22 #include <netdb.h> -

23 #include <pwd.h> -

24 #include <string.h> -

25 #include <stdio.h> -

26 #include <stdarg.h> -

27 #include <ctype.h> -

28 #include <limits.h> -

29 -

30 #include "openbsd-compat/sys-queue.h" -

31 -

32 #include "xmalloc.h" -

33 #include "ssherr.h" -

34 #include "log.h" -

35 #include "sshbuf.h" -

36 #include "misc.h" -

37 #include "sshkey.h" -

38 #include "match.h" -

39 #include "ssh2.h" -

40 #include "auth-options.h" -

41 -

42 /* -

43 * Match flag 'opt' in *optsp, and if allow_negate is set then also match -

44 * 'no-opt'. Returns -1 if option not matched, 1 if option matches or 0 -

45 * if negated option matches. -

46 * If the option or negated option matches, then *optsp is updated to -

47 * point to the first character after the option. -

48 */ -

49 static int -

50 opt_flag(const char *opt, int allow_negate, const char **optsp) -

51 { -

52 size_t opt_len = strlen(opt); -

53 const char *opts = *optsp; -

54 int negate = 0; -

55 -

if (allow_negate && strncasecmp(opts, "no-", 3) == 0) {

allow_negate	Description
TRUE	never evaluated
FALSE	never evaluated

strncasecmp(op..."no-", 3) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

57 opts += 3; -

58 negate = 1; -

}

never executed: end of block

if (strncasecmp(opts, opt, opt_len) == 0) {

strncasecmp(op... opt_len) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

61 *optsp = opts + opt_len; -

return negate ? 0 : 1;

never executed: return negate ? 0 : 1;

negate	Description
TRUE	never evaluated
FALSE	never evaluated

63 } -

return -1;

never executed: return -1;

65 } -

66 -

67 static char * -

68 opt_dequote(const char **sp, const char **errstrp) -

69 { -

70 const char *s = *sp; -

71 char *ret; -

72 size_t i; -

73 -

74 *errstrp = NULL; -

if (*s != '"') {

*s != '"'	Description
TRUE	never evaluated
FALSE	never evaluated

76 *errstrp = "missing start quote"; -

return NULL;

never executed: return ((void *)0) ;

78 } -

79 s++; -

if ((ret = malloc(strlen((s)) + 1)) == NULL) {

(ret = malloc(...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

81 *errstrp = "memory allocation failed"; -

return NULL;

never executed: return ((void *)0) ;

83 } -

for (i = 0; *s != '\0' && *s != '"';) {

*s != '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

*s != '"'	Description
TRUE	never evaluated
FALSE	never evaluated

if (s[0] == '\\' && s[1] == '"')

s[0] == '\\'	Description
TRUE	never evaluated
FALSE	never evaluated

s[1] == '"'	Description
TRUE	never evaluated
FALSE	never evaluated

s++;

never executed: s++;

87 ret[i++] = *s++; -

}

never executed: end of block

if (*s == '\0') {

*s == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

90 *errstrp = "missing end quote"; -

91 free(ret); -

return NULL;

never executed: return ((void *)0) ;

93 } -

94 ret[i] = '\0'; -

95 s++; -

96 *sp = s; -

return ret;

never executed: return ret;

98 } -

99 -

100 static int -

101 opt_match(const char **opts, const char *term) -

102 { -

103

if (strncasecmp((*opts), term, strlen(term)) == 0 &&

strncasecmp((*...en(term)) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

104

(*opts)[strlen(term)] == '=') {

(*opts)[strlen(term)] == '='	Description
TRUE	never evaluated
FALSE	never evaluated

105 *opts += strlen(term) + 1; -

106

return 1;

never executed: return 1;

107 } -

108

return 0;

never executed: return 0;

109 } -

110 -

111 static int -

112 dup_strings(char ***dstp, size_t *ndstp, char **src, size_t nsrc) -

113 { -

114 char **dst; -

115 size_t i, j; -

116 -

117 *dstp = NULL; -

118 *ndstp = 0; -

119

if (nsrc == 0)

nsrc == 0	Description
TRUE	never evaluated
FALSE	never evaluated

120

return 0;

never executed: return 0;

121 -

122

if ((dst = calloc(nsrc, sizeof(*src))) == NULL)

(dst = calloc(...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

123

return -1;

never executed: return -1;

124

for (i = 0; i < nsrc; i++) {

i < nsrc	Description
TRUE	never evaluated
FALSE	never evaluated

125

if ((dst[i] = strdup(src[i])) == NULL) {

never executed: __retval = (char *) memcpy (__retval, src[i] , __len);

(dst[i] = (__e...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...t_p ( src[i] )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...src[i] ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

126

for (j = 0; j < i; j++)

j < i	Description
TRUE	never evaluated
FALSE	never evaluated

127

free(dst[j]);

never executed: free(dst[j]);

128 free(dst); -

129

return -1;

never executed: return -1;

130 } -

131

}

never executed: end of block

132 /* success */ -

133 *dstp = dst; -

134 *ndstp = nsrc; -

135

return 0;

never executed: return 0;

136 } -

137 -

138 #define OPTIONS_CRITICAL 1 -

139 #define OPTIONS_EXTENSIONS 2 -

140 static int -

141 cert_option_list(struct sshauthopt *opts, struct sshbuf *oblob, -

142 u_int which, int crit) -

143 { -

144 char *command, *allowed; -

145 char *name = NULL; -

146 struct sshbuf *c = NULL, *data = NULL; -

147 int r, ret = -1, found; -

148 -

149

if ((c = sshbuf_fromb(oblob)) == NULL) {

(c = sshbuf_fr...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

150 error("%s: sshbuf_fromb failed", __func__); -

151

goto out;

never executed: goto out;

152 } -

153 -

154

while (sshbuf_len(c) > 0) {

sshbuf_len(c) > 0	Description
TRUE	never evaluated
FALSE	never evaluated

155 sshbuf_free(data); -

156 data = NULL; -

157

if ((r = sshbuf_get_cstring(c, &name, NULL)) != 0 ||

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

158

(r = sshbuf_froms(c, &data)) != 0) {

(r = sshbuf_fr..., &data)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

159 error("Unable to parse certificate options: %s", -

160 ssh_err(r)); -

161

goto out;

never executed: goto out;

162 } -

163 debug3("found certificate option \"%.100s\" len %zu", -

164 name, sshbuf_len(data)); -

165 found = 0; -

166

if ((which & OPTIONS_EXTENSIONS) != 0) {

(which & 2) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

167

if (strcmp(name, "permit-X11-forwarding") == 0) {

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "permit-X11-forwarding" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

168 opts->permit_x11_forwarding_flag = 1; -

169 found = 1; -

170

} else if (strcmp(name,

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "permit-agent-forwarding" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

171

"permit-agent-forwarding") == 0) {

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

172 opts->permit_agent_forwarding_flag = 1; -

173 found = 1; -

174

} else if (strcmp(name,

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "permit-port-forwarding" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

175

"permit-port-forwarding") == 0) {

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

176 opts->permit_port_forwarding_flag = 1; -

177 found = 1; -

178

} else if (strcmp(name, "permit-pty") == 0) {

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "permit-pty" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

179 opts->permit_pty_flag = 1; -

180 found = 1; -

181

} else if (strcmp(name, "permit-user-rc") == 0) {

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "permit-user-rc" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

182 opts->permit_user_rc = 1; -

183 found = 1; -

184

}

never executed: end of block

185

}

never executed: end of block

186

if (!found && (which & OPTIONS_CRITICAL) != 0) {

!found	Description
TRUE	never evaluated
FALSE	never evaluated

(which & 1) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

187

if (strcmp(name, "force-command") == 0) {

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "force-command" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

188

if ((r = sshbuf_get_cstring(data, &command,

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

189

NULL)) != 0) {

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

190 error("Unable to parse \"%s\" " -

191 "section: %s", name, ssh_err(r)); -

192

goto out;

never executed: goto out;

193 } -

194

if (opts->force_command != NULL) {

opts->force_co...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

195 error("Certificate has multiple " -

196 "force-command options"); -

197 free(command); -

198

goto out;

never executed: goto out;

199 } -

200 opts->force_command = command; -

201 found = 1; -

202

}

never executed: end of block

203

if (strcmp(name, "source-address") == 0) {

never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "source-address" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

204

if ((r = sshbuf_get_cstring(data, &allowed,

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

205

NULL)) != 0) {

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

206 error("Unable to parse \"%s\" " -

207 "section: %s", name, ssh_err(r)); -

208

goto out;

never executed: goto out;

209 } -

210

if (opts->required_from_host_cert != NULL) {

opts->required...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

211 error("Certificate has multiple " -

212 "source-address options"); -

213 free(allowed); -

214

goto out;

never executed: goto out;

215 } -

216 /* Check syntax */ -

217

if (addr_match_cidr_list(NULL, allowed) == -1) {

addr_match_cid...allowed) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

218 error("Certificate source-address " -

219 "contents invalid"); -

220

goto out;

never executed: goto out;

221 } -

222 opts->required_from_host_cert = allowed; -

223 found = 1; -

224

}

never executed: end of block

225

}

never executed: end of block

226 -

227

if (!found) {

!found	Description
TRUE	never evaluated
FALSE	never evaluated

228

if (crit) {

crit	Description
TRUE	never evaluated
FALSE	never evaluated

229 error("Certificate critical option \"%s\" " -

230 "is not supported", name); -

231

goto out;

never executed: goto out;

232 } else { -

233 logit("Certificate extension \"%s\" " -

234 "is not supported", name); -

235

}

never executed: end of block

236

} else if (sshbuf_len(data) != 0) {

sshbuf_len(data) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

237 error("Certificate option \"%s\" corrupt " -

238 "(extra data)", name); -

239

goto out;

never executed: goto out;

240 } -

241 free(name); -

242 name = NULL; -

243

}

never executed: end of block

244 /* successfully parsed all options */ -

245 ret = 0; -

246 -

247

out:

code before this statement never executed: out:

248 free(name); -

249 sshbuf_free(data); -

250 sshbuf_free(c); -

251

return ret;

never executed: return ret;

252 } -

253 -

254 struct sshauthopt * -

255 sshauthopt_new(void) -

256 { -

257 struct sshauthopt *ret; -

258 -

259

if ((ret = calloc(1, sizeof(*ret))) == NULL)

(ret = calloc(...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

260

return NULL;

never executed: return ((void *)0) ;

261 ret->force_tun_device = -1; -

262

return ret;

never executed: return ret;

263 } -

264 -

265 void -

266 sshauthopt_free(struct sshauthopt *opts) -

267 { -

268 size_t i; -

269 -

270

if (opts == NULL)

opts == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

271

return;

never executed: return;

272 -

273 free(opts->cert_principals); -

274 free(opts->force_command); -

275 free(opts->required_from_host_cert); -

276 free(opts->required_from_host_keys); -

277 -

278

for (i = 0; i < opts->nenv; i++)

i < opts->nenv	Description
TRUE	never evaluated
FALSE	never evaluated

279

free(opts->env[i]);

never executed: free(opts->env[i]);

280 free(opts->env); -

281 -

282

for (i = 0; i < opts->npermitopen; i++)

i < opts->npermitopen	Description
TRUE	never evaluated
FALSE	never evaluated

283

free(opts->permitopen[i]);

never executed: free(opts->permitopen[i]);

284 free(opts->permitopen); -

285 -

286

for (i = 0; i < opts->npermitlisten; i++)

i < opts->npermitlisten	Description
TRUE	never evaluated
FALSE	never evaluated

287

free(opts->permitlisten[i]);

never executed: free(opts->permitlisten[i]);

288 free(opts->permitlisten); -

289 -

290 explicit_bzero(opts, sizeof(*opts)); -

291 free(opts); -

292

}

never executed: end of block

293 -

294 struct sshauthopt * -

295 sshauthopt_new_with_keys_defaults(void) -

296 { -

297 struct sshauthopt *ret = NULL; -

298 -

299

if ((ret = sshauthopt_new()) == NULL)

(ret = sshauth...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

300

return NULL;

never executed: return ((void *)0) ;

301 -

302 /* Defaults for authorized_keys flags */ -

303 ret->permit_port_forwarding_flag = 1; -

304 ret->permit_agent_forwarding_flag = 1; -

305 ret->permit_x11_forwarding_flag = 1; -

306 ret->permit_pty_flag = 1; -

307 ret->permit_user_rc = 1; -

308

return ret;

never executed: return ret;

309 } -

310 -

311 /* -

312 * Parse and record a permitopen/permitlisten directive. -

313 * Return 0 on success. Return -1 on failure and sets *errstrp to error reason. -

314 */ -

315 static int -

316 handle_permit(const char **optsp, int allow_bare_port, -

317 char ***permitsp, size_t *npermitsp, const char **errstrp) -

318 { -

319 char *opt, *tmp, *cp, *host, **permits = *permitsp; -

320 size_t npermits = *npermitsp; -

321 const char *errstr = "unknown error"; -

322 -

323

if (npermits > INT_MAX) {

npermits > 0x7fffffff	Description
TRUE	never evaluated
FALSE	never evaluated

324 *errstrp = "too many permission directives"; -

325

return -1;

never executed: return -1;

326 } -

327

if ((opt = opt_dequote(optsp, &errstr)) == NULL) {

(opt = opt_deq...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

328

return -1;

never executed: return -1;

329 } -

330

if (allow_bare_port && strchr(opt, ':') == NULL) {

allow_bare_port	Description
TRUE	never evaluated
FALSE	never evaluated

(__extension__...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_constant_p ( ':' )	Description
TRUE	never evaluated
FALSE	never evaluated

!__builtin_constant_p ( opt )	Description
TRUE	never evaluated
FALSE	never evaluated

( ':' ) == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

331 /* -

332 * Allow a bare port number in permitlisten to indicate a -

333 * listen_host wildcard. -

334 */ -

335

if (asprintf(&tmp, "*:%s", opt) < 0) {

asprintf(&tmp,...:%s", opt) < 0	Description
TRUE	never evaluated
FALSE	never evaluated

336 *errstrp = "memory allocation failed"; -

337

return -1;

never executed: return -1;

338 } -

339 free(opt); -

340 opt = tmp; -

341

}

never executed: end of block

342

if ((tmp = strdup(opt)) == NULL) {

never executed: __retval = (char *) memcpy (__retval, opt , __len);

(tmp = (__exte...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_constant_p ( opt )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...)( opt ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

343 free(opt); -

344 *errstrp = "memory allocation failed"; -

345

return -1;

never executed: return -1;

346 } -

347 cp = tmp; -

348 /* validate syntax before recording it. */ -

349 host = hpdelim(&cp); -

350

if (host == NULL || strlen(host) >= NI_MAXHOST) {

host == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

strlen(host) >= 1025	Description
TRUE	never evaluated
FALSE	never evaluated

351 free(tmp); -

352 free(opt); -

353 *errstrp = "invalid permission hostname"; -

354

return -1;

never executed: return -1;

355 } -

356 /* -

357 * don't want to use permitopen_port to avoid -

358 * dependency on channels.[ch] here. -

359 */ -

360

if (cp == NULL ||

cp == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

361

(strcmp(cp, "*") != 0 && a2port(cp) <= 0)) {

never executed: __result = (((const unsigned char *) (const char *) ( cp ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( "*" ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

a2port(cp) <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

362 free(tmp); -

363 free(opt); -

364 *errstrp = "invalid permission port"; -

365

return -1;

never executed: return -1;

366 } -

367 /* XXX - add streamlocal support */ -

368 free(tmp); -

369 /* Record it */ -

370

if ((permits = recallocarray(permits, npermits, npermits + 1,

(permits = rec...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

371

sizeof(*permits))) == NULL) {

(permits = rec...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

372 free(opt); -

373 /* NB. don't update *permitsp if alloc fails */ -

374 *errstrp = "memory allocation failed"; -

375

return -1;

never executed: return -1;

376 } -

377 permits[npermits++] = opt; -

378 *permitsp = permits; -

379 *npermitsp = npermits; -

380

return 0;

never executed: return 0;

381 } -

382 -

383 struct sshauthopt * -

384 sshauthopt_parse(const char *opts, const char **errstrp) -

385 { -

386 char **oarray, *opt, *cp, *tmp; -

387 int r; -

388 struct sshauthopt *ret = NULL; -

389 const char *errstr = "unknown error"; -

390 uint64_t valid_before; -

391 -

392

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

393

*errstrp = NULL;

never executed: *errstrp = ((void *)0) ;

394

if ((ret = sshauthopt_new_with_keys_defaults()) == NULL)

(ret = sshauth...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

395

goto alloc_fail;

never executed: goto alloc_fail;

396 -

397

if (opts == NULL)

opts == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

398

return ret;

never executed: return ret;

399 -

400

while (*opts && *opts != ' ' && *opts != '\t') {

*opts	Description
TRUE	never evaluated
FALSE	never evaluated

*opts != ' '	Description
TRUE	never evaluated
FALSE	never evaluated

*opts != '\t'	Description
TRUE	never evaluated
FALSE	never evaluated

401 /* flag options */ -

402

if ((r = opt_flag("restrict", 0, &opts)) != -1) {

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

403 ret->restricted = 1; -

404 ret->permit_port_forwarding_flag = 0; -

405 ret->permit_agent_forwarding_flag = 0; -

406 ret->permit_x11_forwarding_flag = 0; -

407 ret->permit_pty_flag = 0; -

408 ret->permit_user_rc = 0; -

409

} else if ((r = opt_flag("cert-authority", 0, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

410 ret->cert_authority = r; -

411

} else if ((r = opt_flag("port-forwarding", 1, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

412 ret->permit_port_forwarding_flag = r == 1; -

413

} else if ((r = opt_flag("agent-forwarding", 1, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

414 ret->permit_agent_forwarding_flag = r == 1; -

415

} else if ((r = opt_flag("x11-forwarding", 1, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

416 ret->permit_x11_forwarding_flag = r == 1; -

417

} else if ((r = opt_flag("pty", 1, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

418 ret->permit_pty_flag = r == 1; -

419

} else if ((r = opt_flag("user-rc", 1, &opts)) != -1) {

never executed: end of block

(r = opt_flag(... &opts)) != -1	Description
TRUE	never evaluated
FALSE	never evaluated

420 ret->permit_user_rc = r == 1; -

421

} else if (opt_match(&opts, "command")) {

never executed: end of block

opt_match(&opts, "command")	Description
TRUE	never evaluated
FALSE	never evaluated

422

if (ret->force_command != NULL) {

ret->force_com...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

423 errstr = "multiple \"command\" clauses"; -

424

goto fail;

never executed: goto fail;

425 } -

426 ret->force_command = opt_dequote(&opts, &errstr); -

427

if (ret->force_command == NULL)

ret->force_com...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

428

goto fail;

never executed: goto fail;

429

} else if (opt_match(&opts, "principals")) {

never executed: end of block

opt_match(&opts, "principals")	Description
TRUE	never evaluated
FALSE	never evaluated

430

if (ret->cert_principals != NULL) {

ret->cert_prin...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

431 errstr = "multiple \"principals\" clauses"; -

432

goto fail;

never executed: goto fail;

433 } -

434 ret->cert_principals = opt_dequote(&opts, &errstr); -

435

if (ret->cert_principals == NULL)

ret->cert_prin...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

436

goto fail;

never executed: goto fail;

437

} else if (opt_match(&opts, "from")) {

never executed: end of block

opt_match(&opts, "from")	Description
TRUE	never evaluated
FALSE	never evaluated

438

if (ret->required_from_host_keys != NULL) {

ret->required_...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

439 errstr = "multiple \"from\" clauses"; -

440

goto fail;

never executed: goto fail;

441 } -

442 ret->required_from_host_keys = opt_dequote(&opts, -

443 &errstr); -

444

if (ret->required_from_host_keys == NULL)

ret->required_...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

445

goto fail;

never executed: goto fail;

446

} else if (opt_match(&opts, "expiry-time")) {

never executed: end of block

opt_match(&opt..."expiry-time")	Description
TRUE	never evaluated
FALSE	never evaluated

447

if ((opt = opt_dequote(&opts, &errstr)) == NULL)

(opt = opt_deq...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

448

goto fail;

never executed: goto fail;

449

if (parse_absolute_time(opt, &valid_before) != 0 ||

parse_absolute...d_before) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

450

valid_before == 0) {

valid_before == 0	Description
TRUE	never evaluated
FALSE	never evaluated

451 free(opt); -

452 errstr = "invalid expires time"; -

453

goto fail;

never executed: goto fail;

454 } -

455 free(opt); -

456

if (ret->valid_before == 0 ||

ret->valid_before == 0	Description
TRUE	never evaluated
FALSE	never evaluated

457

valid_before < ret->valid_before)

valid_before <...->valid_before	Description
TRUE	never evaluated
FALSE	never evaluated

458

ret->valid_before = valid_before;

never executed: ret->valid_before = valid_before;

459

} else if (opt_match(&opts, "environment")) {

never executed: end of block

opt_match(&opt..."environment")	Description
TRUE	never evaluated
FALSE	never evaluated

460

if (ret->nenv > INT_MAX) {

ret->nenv > 0x7fffffff	Description
TRUE	never evaluated
FALSE	never evaluated

461 errstr = "too many environment strings"; -

462

goto fail;

never executed: goto fail;

463 } -

464

if ((opt = opt_dequote(&opts, &errstr)) == NULL)

(opt = opt_deq...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

465

goto fail;

never executed: goto fail;

466 /* env name must be alphanumeric and followed by '=' */ -

467

if ((tmp = strchr(opt, '=')) == NULL) {

(tmp = (__exte...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_constant_p ( '=' )	Description
TRUE	never evaluated
FALSE	never evaluated

!__builtin_constant_p ( opt )	Description
TRUE	never evaluated
FALSE	never evaluated

( '=' ) == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

468 free(opt); -

469 errstr = "invalid environment string"; -

470

goto fail;

never executed: goto fail;

471 } -

472

for (cp = opt; cp < tmp; cp++) {

cp < tmp	Description
TRUE	never evaluated
FALSE	never evaluated

473

if (!isalnum((u_char)*cp) && *cp != '_') {

! ((*__ctype_b...int) _ISalnum)	Description
TRUE	never evaluated
FALSE	never evaluated

*cp != '_'	Description
TRUE	never evaluated
FALSE	never evaluated

474 free(opt); -

475 errstr = "invalid environment string"; -

476

goto fail;

never executed: goto fail;

477 } -

478

}

never executed: end of block

479 /* Append it. */ -

480 oarray = ret->env; -

481

if ((ret->env = recallocarray(ret->env, ret->nenv,

(ret->env = re...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

482

ret->nenv + 1, sizeof(*ret->env))) == NULL) {

(ret->env = re...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

483 free(opt); -

484 ret->env = oarray; /* put it back for cleanup */ -

485

goto alloc_fail;

never executed: goto alloc_fail;

486 } -

487 ret->env[ret->nenv++] = opt; -

488

} else if (opt_match(&opts, "permitopen")) {

never executed: end of block

opt_match(&opts, "permitopen")	Description
TRUE	never evaluated
FALSE	never evaluated

489

if (handle_permit(&opts, 0, &ret->permitopen,

handle_permit(... &errstr) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

490

&ret->npermitopen, &errstr) != 0)

handle_permit(... &errstr) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

491

goto fail;

never executed: goto fail;

492

} else if (opt_match(&opts, "permitlisten")) {

never executed: end of block

opt_match(&opt...permitlisten")	Description
TRUE	never evaluated
FALSE	never evaluated

493

if (handle_permit(&opts, 1, &ret->permitlisten,

handle_permit(... &errstr) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

494

&ret->npermitlisten, &errstr) != 0)

handle_permit(... &errstr) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

495

goto fail;

never executed: goto fail;

496

} else if (opt_match(&opts, "tunnel")) {

never executed: end of block

opt_match(&opts, "tunnel")	Description
TRUE	never evaluated
FALSE	never evaluated

497

if ((opt = opt_dequote(&opts, &errstr)) == NULL)

(opt = opt_deq...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

498

goto fail;

never executed: goto fail;

499 ret->force_tun_device = a2tun(opt, NULL); -

500 free(opt); -

501

if (ret->force_tun_device == SSH_TUNID_ERR) {

ret->force_tun...x7fffffff - 1)	Description
TRUE	never evaluated
FALSE	never evaluated

502 errstr = "invalid tun device"; -

503

goto fail;

never executed: goto fail;

504 } -

505

}

never executed: end of block

506 /* -

507 * Skip the comma, and move to the next option -

508 * (or break out if there are no more). -

509 */ -

510

if (*opts == '\0' || *opts == ' ' || *opts == '\t')

*opts == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

*opts == ' '	Description
TRUE	never evaluated
FALSE	never evaluated

*opts == '\t'	Description
TRUE	never evaluated
FALSE	never evaluated

511

break; /* End of options. */

never executed: break;

512 /* Anything other than a comma is an unknown option */ -

513

if (*opts != ',') {

*opts != ','	Description
TRUE	never evaluated
FALSE	never evaluated

514 errstr = "unknown key option"; -

515

goto fail;

never executed: goto fail;

516 } -

517 opts++; -

518

if (*opts == '\0') {

*opts == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

519 errstr = "unexpected end-of-options"; -

520

goto fail;

never executed: goto fail;

521 } -

522

}

never executed: end of block

523 -

524 /* success */ -

525

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

526

*errstrp = NULL;

never executed: *errstrp = ((void *)0) ;

527

return ret;

never executed: return ret;

528 -

529 alloc_fail: -

530 errstr = "memory allocation failed"; -

531

fail:

code before this statement never executed: fail:

532 sshauthopt_free(ret); -

533

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

534

*errstrp = errstr;

never executed: *errstrp = errstr;

535

return NULL;

never executed: return ((void *)0) ;

536 } -

537 -

538 struct sshauthopt * -

539 sshauthopt_from_cert(struct sshkey *k) -

540 { -

541 struct sshauthopt *ret; -

542 -

543

if (k == NULL || !sshkey_type_is_cert(k->type) || k->cert == NULL ||

k == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

!sshkey_type_is_cert(k->type)	Description
TRUE	never evaluated
FALSE	never evaluated

k->cert == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

544

k->cert->type != SSH2_CERT_TYPE_USER)

k->cert->type != 1	Description
TRUE	never evaluated
FALSE	never evaluated

545

return NULL;

never executed: return ((void *)0) ;

546 -

547

if ((ret = sshauthopt_new()) == NULL)

(ret = sshauth...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

548

return NULL;

never executed: return ((void *)0) ;

549 -

550 /* Handle options and critical extensions separately */ -

551

if (cert_option_list(ret, k->cert->critical,

cert_option_li...l, 1, 1) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

552

OPTIONS_CRITICAL, 1) == -1) {

cert_option_li...l, 1, 1) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

553 sshauthopt_free(ret); -

554

return NULL;

never executed: return ((void *)0) ;

555 } -

556

if (cert_option_list(ret, k->cert->extensions,

cert_option_li...s, 2, 0) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

557

OPTIONS_EXTENSIONS, 0) == -1) {

cert_option_li...s, 2, 0) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

558 sshauthopt_free(ret); -

559

return NULL;

never executed: return ((void *)0) ;

560 } -

561 /* success */ -

562

return ret;

never executed: return ret;

563 } -

564 -

565 /* -

566 * Merges "additional" options to "primary" and returns the result. -

567 * NB. Some options from primary have primacy. -

568 */ -

569 struct sshauthopt * -

570 sshauthopt_merge(const struct sshauthopt *primary, -

571 const struct sshauthopt *additional, const char **errstrp) -

572 { -

573 struct sshauthopt *ret; -

574 const char *errstr = "internal error"; -

575 const char *tmp; -

576 -

577

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

578

*errstrp = NULL;

never executed: *errstrp = ((void *)0) ;

579 -

580

if ((ret = sshauthopt_new()) == NULL)

(ret = sshauth...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

581

goto alloc_fail;

never executed: goto alloc_fail;

582 -

583 /* cert_authority and cert_principals are cleared in result */ -

584 -

585 /* Prefer access lists from primary. */ -

586 /* XXX err is both set and mismatch? */ -

587 tmp = primary->required_from_host_cert; -

588

if (tmp == NULL)

tmp == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

589

tmp = additional->required_from_host_cert;

never executed: tmp = additional->required_from_host_cert;

590

if (tmp != NULL && (ret->required_from_host_cert = strdup(tmp)) == NULL)

never executed: __retval = (char *) memcpy (__retval, tmp , __len);

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

tmp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->required...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_constant_p ( tmp )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...)( tmp ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

591

goto alloc_fail;

never executed: goto alloc_fail;

592 tmp = primary->required_from_host_keys; -

593

if (tmp == NULL)

tmp == ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

594

tmp = additional->required_from_host_keys;

never executed: tmp = additional->required_from_host_keys;

595

if (tmp != NULL && (ret->required_from_host_keys = strdup(tmp)) == NULL)

never executed: __retval = (char *) memcpy (__retval, tmp , __len);

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

tmp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->required...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_constant_p ( tmp )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...)( tmp ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

596

goto alloc_fail;

never executed: goto alloc_fail;

597 -

598 /* -

599 * force_tun_device, permitopen/permitlisten and environment all -

600 * prefer the primary. -

601 */ -

602 ret->force_tun_device = primary->force_tun_device; -

603

if (ret->force_tun_device == -1)

ret->force_tun_device == -1	Description
TRUE	never evaluated
FALSE	never evaluated

604

ret->force_tun_device = additional->force_tun_device;

never executed: ret->force_tun_device = additional->force_tun_device;

605

if (primary->nenv > 0) {

primary->nenv > 0	Description
TRUE	never evaluated
FALSE	never evaluated

606

if (dup_strings(&ret->env, &ret->nenv,

dup_strings(&r...ry->nenv) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

607

primary->env, primary->nenv) != 0)

dup_strings(&r...ry->nenv) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

608

goto alloc_fail;

never executed: goto alloc_fail;

609

} else if (additional->nenv) {

never executed: end of block

additional->nenv	Description
TRUE	never evaluated
FALSE	never evaluated

610

if (dup_strings(&ret->env, &ret->nenv,

dup_strings(&r...al->nenv) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

611

additional->env, additional->nenv) != 0)

dup_strings(&r...al->nenv) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

612

goto alloc_fail;

never executed: goto alloc_fail;

613

}

never executed: end of block

614

if (primary->npermitopen > 0) {

primary->npermitopen > 0	Description
TRUE	never evaluated
FALSE	never evaluated

615

if (dup_strings(&ret->permitopen, &ret->npermitopen,

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

616

primary->permitopen, primary->npermitopen) != 0)

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

617

goto alloc_fail;

never executed: goto alloc_fail;

618

} else if (additional->npermitopen > 0) {

never executed: end of block

additional->npermitopen > 0	Description
TRUE	never evaluated
FALSE	never evaluated

619

if (dup_strings(&ret->permitopen, &ret->npermitopen,

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

620

additional->permitopen, additional->npermitopen) != 0)

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

621

goto alloc_fail;

never executed: goto alloc_fail;

622

}

never executed: end of block

623 -

624

if (primary->npermitlisten > 0) {

primary->npermitlisten > 0	Description
TRUE	never evaluated
FALSE	never evaluated

625

if (dup_strings(&ret->permitlisten, &ret->npermitlisten,

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

626

primary->permitlisten, primary->npermitlisten) != 0)

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

627

goto alloc_fail;

never executed: goto alloc_fail;

628

} else if (additional->npermitlisten > 0) {

never executed: end of block

additional->npermitlisten > 0	Description
TRUE	never evaluated
FALSE	never evaluated

629

if (dup_strings(&ret->permitlisten, &ret->npermitlisten,

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

630

additional->permitlisten, additional->npermitlisten) != 0)

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

631

goto alloc_fail;

never executed: goto alloc_fail;

632

}

never executed: end of block

633 -

634 /* Flags are logical-AND (i.e. must be set in both for permission) */ -

635 #define OPTFLAG(x) ret->x = (primary->x == 1) && (additional->x == 1) -

636

OPTFLAG(permit_port_forwarding_flag);

(primary->perm...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

(additional->p...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

637

OPTFLAG(permit_agent_forwarding_flag);

(primary->perm...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

(additional->p...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

638

OPTFLAG(permit_x11_forwarding_flag);

(primary->perm...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

(additional->p...ing_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

639

OPTFLAG(permit_pty_flag);

(primary->perm...pty_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

(additional->p...pty_flag == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

640

OPTFLAG(permit_user_rc);

(primary->permit_user_rc == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

(additional->p..._user_rc == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

641 #undef OPTFLAG -

642 -

643 /* Earliest expiry time should win */ -

644

if (primary->valid_before != 0)

primary->valid_before != 0	Description
TRUE	never evaluated
FALSE	never evaluated

645

ret->valid_before = primary->valid_before;

never executed: ret->valid_before = primary->valid_before;

646

if (additional->valid_before != 0 &&

additional->valid_before != 0	Description
TRUE	never evaluated
FALSE	never evaluated

647

additional->valid_before < ret->valid_before)

additional->va...->valid_before	Description
TRUE	never evaluated
FALSE	never evaluated

648

ret->valid_before = additional->valid_before;

never executed: ret->valid_before = additional->valid_before;

649 -

650 /* -

651 * When both multiple forced-command are specified, only -

652 * proceed if they are identical, otherwise fail. -

653 */ -

654

if (primary->force_command != NULL &&

primary->force...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

655

additional->force_command != NULL) {

additional->fo...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

656

if (strcmp(primary->force_command,

never executed: __result = (((const unsigned char *) (const char *) ( primary->force_command ))[3] - __s2[3]);

never executed: end of block

never executed: __result = (((const unsigned char *) (const char *) ( additional->force_command ))[3] - __s2[3]);

never executed: end of block

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s1_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 0	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 1	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

__s2_len > 2	Description
TRUE	never evaluated
FALSE	never evaluated

__result == 0	Description
TRUE	never evaluated
FALSE	never evaluated

657

additional->force_command) == 0) {

__extension__ ... )))); }) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

658 /* ok */ -

659

ret->force_command = strdup(primary->force_command);

never executed: __retval = (char *) memcpy (__retval, primary->force_command , __len);

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...orce_command )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...ommand ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

660

if (ret->force_command == NULL)

ret->force_com...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

661

goto alloc_fail;

never executed: goto alloc_fail;

662

} else {

never executed: end of block

663 errstr = "forced command options do not match"; -

664

goto fail;

never executed: goto fail;

665 } -

666

} else if (primary->force_command != NULL) {

primary->force...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

667

if ((ret->force_command = strdup(

never executed: __retval = (char *) memcpy (__retval, primary->force_command , __len);

(ret->force_co...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...orce_command )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...ommand ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

668

primary->force_command)) == NULL)

(ret->force_co...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

669

goto alloc_fail;

never executed: goto alloc_fail;

670

} else if (additional->force_command != NULL) {

never executed: end of block

additional->fo...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

671

if ((ret->force_command = strdup(

never executed: __retval = (char *) memcpy (__retval, additional->force_command , __len);

(ret->force_co...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...orce_command )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...ommand ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

672

additional->force_command)) == NULL)

(ret->force_co...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

673

goto alloc_fail;

never executed: goto alloc_fail;

674

}

never executed: end of block

675 /* success */ -

676

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

677

*errstrp = NULL;

never executed: *errstrp = ((void *)0) ;

678

return ret;

never executed: return ret;

679 -

680 alloc_fail: -

681 errstr = "memory allocation failed"; -

682

fail:

code before this statement never executed: fail:

683

if (errstrp != NULL)

errstrp != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

684

*errstrp = errstr;

never executed: *errstrp = errstr;

685 sshauthopt_free(ret); -

686

return NULL;

never executed: return ((void *)0) ;

687 } -

688 -

689 /* -

690 * Copy options -

691 */ -

692 struct sshauthopt * -

693 sshauthopt_copy(const struct sshauthopt *orig) -

694 { -

695 struct sshauthopt *ret; -

696 -

697

if ((ret = sshauthopt_new()) == NULL)

(ret = sshauth...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

698

return NULL;

never executed: return ((void *)0) ;

699 -

700 #define OPTSCALAR(x) ret->x = orig->x -

701 OPTSCALAR(permit_port_forwarding_flag); -

702 OPTSCALAR(permit_agent_forwarding_flag); -

703 OPTSCALAR(permit_x11_forwarding_flag); -

704 OPTSCALAR(permit_pty_flag); -

705 OPTSCALAR(permit_user_rc); -

706 OPTSCALAR(restricted); -

707 OPTSCALAR(cert_authority); -

708 OPTSCALAR(force_tun_device); -

709 OPTSCALAR(valid_before); -

710 #undef OPTSCALAR -

711 #define OPTSTRING(x) \ -

712 do { \ -

713 if (orig->x != NULL && (ret->x = strdup(orig->x)) == NULL) { \ -

714 sshauthopt_free(ret); \ -

715 return NULL; \ -

716 } \ -

717 } while (0) -

718

OPTSTRING(cert_principals);

never executed: __retval = (char *) memcpy (__retval, orig->cert_principals , __len);

never executed: return ((void *)0) ;

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

orig->cert_pri...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->cert_pri...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...t_principals )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...cipals ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

719

OPTSTRING(force_command);

never executed: __retval = (char *) memcpy (__retval, orig->force_command , __len);

never executed: return ((void *)0) ;

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

orig->force_co...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->force_co...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...orce_command )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...ommand ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

720

OPTSTRING(required_from_host_cert);

never executed: __retval = (char *) memcpy (__retval, orig->required_from_host_cert , __len);

never executed: return ((void *)0) ;

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

orig->required...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->required...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...om_host_cert )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...t_cert ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

721

OPTSTRING(required_from_host_keys);

never executed: __retval = (char *) memcpy (__retval, orig->required_from_host_keys , __len);

never executed: return ((void *)0) ;

__retval != ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

((const char *... ))[0] == '\0'	Description
TRUE	never evaluated
FALSE	never evaluated

orig->required...!= ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

(ret->required...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

__builtin_cons...om_host_keys )	Description
TRUE	never evaluated
FALSE	never evaluated

((size_t)(cons...t_keys ) == 1)	Description
TRUE	never evaluated
FALSE	never evaluated

722 #undef OPTSTRING -

723 -

724

if (dup_strings(&ret->env, &ret->nenv, orig->env, orig->nenv) != 0 ||

dup_strings(&r...ig->nenv) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

725

dup_strings(&ret->permitopen, &ret->npermitopen,

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

726

orig->permitopen, orig->npermitopen) != 0 ||

dup_strings(&r...rmitopen) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

727

dup_strings(&ret->permitlisten, &ret->npermitlisten,

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

728

orig->permitlisten, orig->npermitlisten) != 0) {

dup_strings(&r...itlisten) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

729 sshauthopt_free(ret); -

730

return NULL;

never executed: return ((void *)0) ;

731 } -

732

return ret;

never executed: return ret;

733 } -

734 -

735 static int -

736 serialise_array(struct sshbuf *m, char **a, size_t n) -

737 { -

738 struct sshbuf *b; -

739 size_t i; -

740 int r; -

741 -

742

if (n > INT_MAX)

n > 0x7fffffff	Description
TRUE	never evaluated
FALSE	never evaluated

743

return SSH_ERR_INTERNAL_ERROR;

never executed: return -1;

744 -

745

if ((b = sshbuf_new()) == NULL) {

(b = sshbuf_ne...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

746

return SSH_ERR_ALLOC_FAIL;

never executed: return -2;

747 } -

748

for (i = 0; i < n; i++) {

i < n	Description
TRUE	never evaluated
FALSE	never evaluated

749

if ((r = sshbuf_put_cstring(b, a[i])) != 0) {

(r = sshbuf_pu...b, a[i])) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

750 sshbuf_free(b); -

751

return r;

never executed: return r;

752 } -

753

}

never executed: end of block

754

if ((r = sshbuf_put_u32(m, n)) != 0 ||

(r = sshbuf_pu...32(m, n)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

755

(r = sshbuf_put_stringb(m, b)) != 0) {

(r = sshbuf_pu...gb(m, b)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

756 sshbuf_free(b); -

757

return r;

never executed: return r;

758 } -

759 /* success */ -

760

return 0;

never executed: return 0;

761 } -

762 -

763 static int -

764 deserialise_array(struct sshbuf *m, char ***ap, size_t *np) -

765 { -

766 char **a = NULL; -

767 size_t i, n = 0; -

768 struct sshbuf *b = NULL; -

769 u_int tmp; -

770 int r = SSH_ERR_INTERNAL_ERROR; -

771 -

772

if ((r = sshbuf_get_u32(m, &tmp)) != 0 ||

(r = sshbuf_ge...m, &tmp)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

773

(r = sshbuf_froms(m, &b)) != 0)

(r = sshbuf_froms(m, &b)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

774

goto out;

never executed: goto out;

775

if (tmp > INT_MAX) {

tmp > 0x7fffffff	Description
TRUE	never evaluated
FALSE	never evaluated

776 r = SSH_ERR_INVALID_FORMAT; -

777

goto out;

never executed: goto out;

778 } -

779 n = tmp; -

780

if (n > 0 && (a = calloc(n, sizeof(*a))) == NULL) {

n > 0	Description
TRUE	never evaluated
FALSE	never evaluated

(a = calloc(n,...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

781 r = SSH_ERR_ALLOC_FAIL; -

782

goto out;

never executed: goto out;

783 } -

784

for (i = 0; i < n; i++) {

i < n	Description
TRUE	never evaluated
FALSE	never evaluated

785

if ((r = sshbuf_get_cstring(b, &a[i], NULL)) != 0)

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

786

goto out;

never executed: goto out;

787

}

never executed: end of block

788 /* success */ -

789 r = 0; -

790 *ap = a; -

791 a = NULL; -

792 *np = n; -

793 n = 0; -

794

out:

code before this statement never executed: out:

795

for (i = 0; i < n; i++)

i < n	Description
TRUE	never evaluated
FALSE	never evaluated

796

free(a[i]);

never executed: free(a[i]);

797 free(a); -

798 sshbuf_free(b); -

799

return r;

never executed: return r;

800 } -

801 -

802 static int -

803 serialise_nullable_string(struct sshbuf *m, const char *s) -

804 { -

805 int r; -

806 -

807

if ((r = sshbuf_put_u8(m, s == NULL)) != 0 ||

(r = sshbuf_pu...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

808

(r = sshbuf_put_cstring(m, s)) != 0)

(r = sshbuf_pu...ng(m, s)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

809

return r;

never executed: return r;

810

return 0;

never executed: return 0;

811 } -

812 -

813 static int -

814 deserialise_nullable_string(struct sshbuf *m, char **sp) -

815 { -

816 int r; -

817 u_char flag; -

818 -

819 *sp = NULL; -

820

if ((r = sshbuf_get_u8(m, &flag)) != 0 ||

(r = sshbuf_ge..., &flag)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

821

(r = sshbuf_get_cstring(m, flag ? NULL : sp, NULL)) != 0)

(r = sshbuf_ge...d *)0) )) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

822

return r;

never executed: return r;

823

return 0;

never executed: return 0;

824 } -

825 -

826 int -

827 sshauthopt_serialise(const struct sshauthopt *opts, struct sshbuf *m, -

828 int untrusted) -

829 { -

830 int r = SSH_ERR_INTERNAL_ERROR; -

831 -

832 /* Flag and simple integer options */ -

833

if ((r = sshbuf_put_u8(m, opts->permit_port_forwarding_flag)) != 0 ||

(r = sshbuf_pu...ng_flag)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

834

(r = sshbuf_put_u8(m, opts->permit_agent_forwarding_flag)) != 0 ||

(r = sshbuf_pu...ng_flag)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

835

(r = sshbuf_put_u8(m, opts->permit_x11_forwarding_flag)) != 0 ||

(r = sshbuf_pu...ng_flag)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

836

(r = sshbuf_put_u8(m, opts->permit_pty_flag)) != 0 ||

(r = sshbuf_pu...ty_flag)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

837

(r = sshbuf_put_u8(m, opts->permit_user_rc)) != 0 ||

(r = sshbuf_pu...user_rc)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

838

(r = sshbuf_put_u8(m, opts->restricted)) != 0 ||

(r = sshbuf_pu...tricted)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

839

(r = sshbuf_put_u8(m, opts->cert_authority)) != 0 ||

(r = sshbuf_pu...thority)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

840

(r = sshbuf_put_u64(m, opts->valid_before)) != 0)

(r = sshbuf_pu..._before)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

841

return r;

never executed: return r;

842 -

843 /* tunnel number can be negative to indicate "unset" */ -

844

if ((r = sshbuf_put_u8(m, opts->force_tun_device == -1)) != 0 ||

(r = sshbuf_pu...e == -1)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

845

(r = sshbuf_put_u32(m, (opts->force_tun_device < 0) ?

(r = sshbuf_pu..._device)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

846

0 : (u_int)opts->force_tun_device)) != 0)

(r = sshbuf_pu..._device)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

847

return r;

never executed: return r;

848 -

849 /* String options; these may be NULL */ -

850

if ((r = serialise_nullable_string(m,

(r = serialise...ncipals)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

851

untrusted ? "yes" : opts->cert_principals)) != 0 ||

(r = serialise...ncipals)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

852

(r = serialise_nullable_string(m,

(r = serialise...command)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

853

untrusted ? "true" : opts->force_command)) != 0 ||

(r = serialise...command)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

854

(r = serialise_nullable_string(m,

(r = serialise...st_cert)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

855

untrusted ? NULL : opts->required_from_host_cert)) != 0 ||

(r = serialise...st_cert)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

856

(r = serialise_nullable_string(m,

(r = serialise...st_keys)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

857

untrusted ? NULL : opts->required_from_host_keys)) != 0)

(r = serialise...st_keys)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

858

return r;

never executed: return r;

859 -

860 /* Array options */ -

861

if ((r = serialise_array(m, opts->env,

(r = serialise...s->nenv)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

862

untrusted ? 0 : opts->nenv)) != 0 ||

(r = serialise...s->nenv)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

863

(r = serialise_array(m, opts->permitopen,

(r = serialise...mitopen)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

864

untrusted ? 0 : opts->npermitopen)) != 0 ||

(r = serialise...mitopen)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

865

(r = serialise_array(m, opts->permitlisten,

(r = serialise...tlisten)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

866

untrusted ? 0 : opts->npermitlisten)) != 0)

(r = serialise...tlisten)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

867

return r;

never executed: return r;

868 -

869 /* success */ -

870

return 0;

never executed: return 0;

871 } -

872 -

873 int -

874 sshauthopt_deserialise(struct sshbuf *m, struct sshauthopt **optsp) -

875 { -

876 struct sshauthopt *opts = NULL; -

877 int r = SSH_ERR_INTERNAL_ERROR; -

878 u_char f; -

879 u_int tmp; -

880 -

881

if ((opts = calloc(1, sizeof(*opts))) == NULL)

(opts = calloc...== ((void *)0)	Description
TRUE	never evaluated
FALSE	never evaluated

882

return SSH_ERR_ALLOC_FAIL;

never executed: return -2;

883 -

884 #define OPT_FLAG(x) \ -

885 do { \ -

886 if ((r = sshbuf_get_u8(m, &f)) != 0) \ -

887 goto out; \ -

888 opts->x = f; \ -

889 } while (0) -

890

OPT_FLAG(permit_port_forwarding_flag);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

891

OPT_FLAG(permit_agent_forwarding_flag);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

892

OPT_FLAG(permit_x11_forwarding_flag);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

893

OPT_FLAG(permit_pty_flag);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

894

OPT_FLAG(permit_user_rc);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

895

OPT_FLAG(restricted);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

896

OPT_FLAG(cert_authority);

never executed: goto out;

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

897 #undef OPT_FLAG -

898 -

899

if ((r = sshbuf_get_u64(m, &opts->valid_before)) != 0)

(r = sshbuf_ge..._before)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

900

goto out;

never executed: goto out;

901 -

902 /* tunnel number can be negative to indicate "unset" */ -

903

if ((r = sshbuf_get_u8(m, &f)) != 0 ||

(r = sshbuf_ge...8(m, &f)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

904

(r = sshbuf_get_u32(m, &tmp)) != 0)

(r = sshbuf_ge...m, &tmp)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

905

goto out;

never executed: goto out;

906

opts->force_tun_device = f ? -1 : (int)tmp;

f	Description
TRUE	never evaluated
FALSE	never evaluated

907 -

908 /* String options may be NULL */ -

909

if ((r = deserialise_nullable_string(m, &opts->cert_principals)) != 0 ||

(r = deseriali...ncipals)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

910

(r = deserialise_nullable_string(m, &opts->force_command)) != 0 ||

(r = deseriali...command)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

911

(r = deserialise_nullable_string(m,

(r = deseriali...st_cert)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

912

&opts->required_from_host_cert)) != 0 ||

(r = deseriali...st_cert)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

913

(r = deserialise_nullable_string(m,

(r = deseriali...st_keys)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

914

&opts->required_from_host_keys)) != 0)

(r = deseriali...st_keys)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

915

goto out;

never executed: goto out;

916 -

917 /* Array options */ -

918

if ((r = deserialise_array(m, &opts->env, &opts->nenv)) != 0 ||

(r = deseriali...s->nenv)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

919

(r = deserialise_array(m,

(r = deseriali...mitopen)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

920

&opts->permitopen, &opts->npermitopen)) != 0 ||

(r = deseriali...mitopen)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

921

(r = deserialise_array(m,

(r = deseriali...tlisten)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

922

&opts->permitlisten, &opts->npermitlisten)) != 0)

(r = deseriali...tlisten)) != 0	Description
TRUE	never evaluated
FALSE	never evaluated

923

goto out;

never executed: goto out;

924 -

925 /* success */ -

926 r = 0; -

927 *optsp = opts; -

928 opts = NULL; -

929

out:

code before this statement never executed: out:

930 sshauthopt_free(opts); -

931

return r;

never executed: return r;

932 } -

Source code

Switch to Preprocessed file

Generated by Squish Coco 4.2.2