Codebase list i3-gaps / kali/4.18.1-0kali1 travis / check-safe-wrappers.sh
kali/4.18.1-0kali1

Tree @kali/4.18.1-0kali1 (Download .tar.gz)

check-safe-wrappers.sh @kali/4.18.1-0kali1raw · history · blame

#!/bin/sh
funcs='malloc|calloc|realloc|strdup|strndup|asprintf|write'
cstring='"([^"\\]|\\.)*"'
cchar="'[^\\\\]'|'\\\\.[^']*'"
regex="^([^'\"]|${cstring}|${cchar})*\<(${funcs})\>"
detected=0
while IFS= read -r file; do
    if { cpp -w -fpreprocessed "$file" || exit "$?"; } | grep -E -- "$regex"; then
        echo "^ $file calls a function that has a safe counterpart."
        detected=1
    fi
done << EOF
$(find -name '*.c' -not -name safewrappers.c -not -name strndup.c)
EOF
if [ "$detected" -ne 0 ]; then
    echo
    echo "Calls of functions that have safe counterparts were detected."
    exit 1
fi