[apparmor] [PATCH 3/6] parser: Create a label parsing function that doesn't exit or malloc

John Johansen john.johansen at canonical.com
Fri Mar 4 16:24:45 UTC 2016


On 03/04/2016 12:16 AM, Tyler Hicks wrote:
> This patch separates the label parsing functionality from the program
> termination and memory allocation duties of parse_label(). This will
> ultimately help in creating simple helper functions that simply need to
> check if a label contains a namespace.
> 
> Signed-off-by: Tyler Hicks <tyhicks at canonical.com>

Acked-by: John Johansen <john.johansen at canonical.com>



> ---
>  parser/parser_misc.c | 94 +++++++++++++++++++++++++++++++++++++++++-----------
>  1 file changed, 75 insertions(+), 19 deletions(-)
> 
> diff --git a/parser/parser_misc.c b/parser/parser_misc.c
> index 2348189..d0d8115 100644
> --- a/parser/parser_misc.c
> +++ b/parser/parser_misc.c
> @@ -569,24 +569,44 @@ int parse_X_mode(const char *X, int valid, const char *str_mode, int *mode, int
>  	return 1;
>  }
>  
> -void parse_label(char **ns, char **name, const char *label)
> +/**
> + * parse_label - break a label down to the namespace and profile name
> + * @ns: Will point to the first char in the namespace upon return or NULL
> + *      if no namespace is present
> + * @ns_len: Number of chars in the namespace string or 0 if no namespace
> + *          is present
> + * @name: Will point to the first char in the profile name upon return
> + * @name_len: Number of chars in the name string
> + * @label: The label to parse into namespace and profile name
> + *
> + * The returned pointers will point to locations within the original
> + * @label string. No new strings are allocated.
> + *
> + * Returns 0 upon success or non-zero with @ns, @ns_len, @name, and
> + * @name_len undefined upon error. Error codes are:
> + *
> + * 1) Namespace is not terminated despite @label starting with ':'
> + * 2) Namespace is empty meaning @label starts with "::"
> + * 3) Profile name is empty
> + */
> +static int _parse_label(char **ns, size_t *ns_len,
> +			char **name, size_t *name_len,
> +			const char *label)
>  {
>  	const char *name_start = NULL;
> -	char *_ns = NULL;
> -	char *_name = NULL;
> +	const char *ns_start = NULL;
> +	const char *ns_end = NULL;
>  
>  	if (label[0] != ':') {
>  		/* There is no namespace specified in the label */
>  		name_start = label;
>  	} else {
>  		/* A leading ':' indicates that a namespace is specified */
> -		const char *ns_start = label + 1;
> -		const char *ns_end = strstr(ns_start, ":");
> +		ns_start = label + 1;
> +		ns_end = strstr(ns_start, ":");
>  
>  		if (!ns_end)
> -			yyerror(_("Namespace not terminated: %s\n"), label);
> -		else if (ns_end - ns_start == 0)
> -			yyerror(_("Empty namespace: %s\n"), label);
> +			return 1;
>  
>  		/**
>  		 * Handle either of the two namespace formats:
> @@ -596,23 +616,59 @@ void parse_label(char **ns, char **name, const char *label)
>  		name_start = ns_end + 1;
>  		if (!strncmp(name_start, "//", 2))
>  			name_start += 2;
> -
> -		_ns = strndup(ns_start, ns_end - ns_start);
> -		if (!_ns)
> -			yyerror(_("Memory allocation error."));
>  	}
>  
> -	if (!strlen(name_start))
> +	/**
> +	 * The casts below are to allow @label to be const, signifying
> +	 * that this function doesn't modify it, while allowing callers to
> +	 * decide if they want to pass in pointers to const or non-const
> +	 * strings.
> +	 */
> +	*ns = (char *)ns_start;
> +	*name = (char *)name_start;
> +	*ns_len = ns_end - ns_start;
> +	*name_len = strlen(name_start);
> +
> +	if (*ns && *ns_len == 0)
> +		return 2;
> +	else if (*name_len == 0)
> +		return 3;
> +
> +	return 0;
> +}
> +
> +void parse_label(char **_ns, char **_name, const char *label)
> +{
> +	char *ns = NULL;
> +	char *name = NULL;
> +	size_t ns_len = 0;
> +	size_t name_len = 0;
> +	int res;
> +
> +	res = _parse_label(&ns, &ns_len, &name, &name_len, label);
> +	if (res == 1) {
> +		yyerror(_("Namespace not terminated: %s\n"), label);
> +	} else if (res == 2) {
> +		yyerror(_("Empty namespace: %s\n"), label);
> +	} else if (res == 3) {
>  		yyerror(_("Empty named transition profile name: %s\n"), label);
> +	} else if (res != 0) {
> +		yyerror(_("Unknown error while parsing label: %s\n"), label);
> +	}
>  
> -	_name = strdup(name_start);
> -	if (!_name) {
> -		free(_ns);
> -		yyerror(_("Memory allocation error."));
> +	if (ns) {
> +		*_ns = strndup(ns, ns_len);
> +		if (!*_ns)
> +			yyerror(_("Memory allocation error."));
> +	} else {
> +		*_ns = NULL;
>  	}
>  
> -	*ns = _ns;
> -	*name = _name;
> +	*_name = strndup(name, name_len);
> +	if (!*_name) {
> +		free(*_ns);
> +		yyerror(_("Memory allocation error."));
> +	}
>  }
>  
>  void parse_named_transition_target(struct named_transition *nt,
> 




More information about the AppArmor mailing list