/usr/src/bin/ksh/syn.c

Bug Summary

File:	src/bin/ksh/syn.c
Warning:	line 862, column 12 1st function call argument is an uninitialized value

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.4 -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name syn.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/bin/ksh/obj -resource-dir /usr/local/llvm16/lib/clang/16 -D EMACS -D VI -I . -I /usr/src/bin/ksh -I /usr/src/bin/ksh/../../lib/libc/gen -internal-isystem /usr/local/llvm16/lib/clang/16/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/bin/ksh/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fcf-protection=branch -fno-jump-tables -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/scan/2024-01-11-140451-98009-1 -x c /usr/src/bin/ksh/syn.c

1/*	$OpenBSD: syn.c,v 1.40 2021/07/05 13:41:46 millert Exp $	*/

3/*
* shell parser (C version)
*/

7#include <string.h>

9#include "sh.h"
10#include "c_test.h"

12struct nesting_state {
int	start_token;	/* token than began nesting (eg, FOR) */
int	start_line;	/* line nesting began on */
15};

17static void	yyparse(void);
18static struct op *pipeline(int);
19static struct op *andor(void);
20static struct op *c_list(int);
21static struct ioword *synio(int);
22static void	musthave(int, int);
23static struct op *nested(int, int, int);
24static struct op *get_command(int);
25static struct op *dogroup(void);
26static struct op *thenpart(void);
27static struct op *elsepart(void);
28static struct op *caselist(void);
29static struct op *casepart(int);
30static struct op *function_body(char *, int);
31static char **	wordlist(void);
32static struct op *block(int, struct op *, struct op *, char **);
33static struct op *newtp(int);
34static void	syntaxerr(const char *) __attribute__((__noreturn__));
35static void	nesting_push(struct nesting_state *, int);
36static void	nesting_pop(struct nesting_state *);
37static int	assign_command(char *);
38static int	inalias(struct source *);
39static int	dbtestp_isa(Test_env *, Test_meta);
40static const char *dbtestp_getopnd(Test_env *, Test_op, int);
41static int	dbtestp_eval(Test_env *, Test_op, const char *, const char *,
    int);
43static void	dbtestp_error(Test_env *, int, const char *);

45static	struct	op	*outtree; /* yyparse output */

47static struct nesting_state nesting;	/* \n changed to ; */

49static	int	reject;		/* token(cf) gets symbol again */
50static	int	symbol;		/* yylex value */

52#define	token(cf)((reject) ? (reject = 0, symbol) : (symbol = yylex(cf))) \
((reject) ? (reject = false0, symbol) : (symbol = yylex(cf)))
54#define	tpeek(cf)((reject) ? (symbol) : (reject = 1, symbol = yylex(cf))) \
((reject) ? (symbol) : (reject = true1, symbol = yylex(cf)))

57static void
58yyparse(void)
59{
int c;

reject = false0;

outtree = c_list(source->type == SSTRING3);
c = tpeek(0)((reject) ? (symbol) : (reject = 1, symbol = yylex(0)));
if (c == 0 && !outtree)
outtree = newtp(TEOF0);
else if (c != '\n' && c != 0)
syntaxerr(NULL((void *)0));
70}

72static struct op *
73pipeline(int cf)
74{
struct op *t, *p, *tl = NULL((void *)0);

t = get_command(cf);
if (t != NULL((void *)0)) {
while (token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0))) == '|') {
	if ((p = get_command(CONTIN(1<<(0)))) == NULL((void *)0))
		syntaxerr(NULL((void *)0));
	if (tl == NULL((void *)0))
		t = tl = block(TPIPE3, t, p, NULL((void *)0));
	else
		tl = tl->right = block(TPIPE3, tl->right, p, NULL((void *)0));
}
reject = true1;
}
return (t);
90}

92static struct op *
93andor(void)
94{
struct op *t, *p;
int c;

t = pipeline(0);
if (t != NULL((void *)0)) {
while ((c = token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0)))) == LOGAND257 || c == LOGOR258) {
	if ((p = pipeline(CONTIN(1<<(0)))) == NULL((void *)0))
		syntaxerr(NULL((void *)0));
	t = block(c == LOGAND257? TAND6: TOR5, t, p, NULL((void *)0));
}
reject = true1;
}
return (t);
108}

110static struct op *
111c_list(int multi)
112{
struct op *t = NULL((void *)0), *p, *tl = NULL((void *)0);
int c;
int have_sep;

while (1) {
p = andor();
/* Token has always been read/rejected at this point, so
 * we don't worry about what flags to pass token()
 */
c = token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0)));
have_sep = 1;
if (c == '\n' && (multi || inalias(source))) {
	if (!p) /* ignore blank lines */
		continue;
} else if (!p)
	break;
else if (c == '&' || c == COPROC280)
	p = block(c == '&' ? TASYNC18 : TCOPROC22,
		  p, NULL((void *)0), NULL((void *)0));
else if (c != ';')
	have_sep = 0;
if (!t)
	t = p;
else if (!tl)
	t = tl = block(TLIST4, t, p, NULL((void *)0));
else
	tl = tl->right = block(TLIST4, tl->right, p, NULL((void *)0));
if (!have_sep)
	break;
}
reject = true1;
return t;
145}

147static struct ioword *
148synio(int cf)
149{
struct ioword *iop;
int ishere;

if (tpeek(cf)((reject) ? (symbol) : (reject = 1, symbol = yylex(cf))) != REDIR276)
return NULL((void *)0);
reject = false0;
iop = yylval.iop;
ishere = (iop->flag&IOTYPE0xF) == IOHERE0x4;
musthave(LWORD256, ishere ? HEREDELIM(1<<(9)) : 0);
if (ishere) {
iop->delim = yylval.cp;
if (*ident != 0) /* unquoted */
	iop->flag |= IOEVAL(1<<(4));
if (herep >= &heres[HERES10])
	yyerror("too many <<'s\n");
*herep++ = iop;
} else
iop->name = yylval.cp;
return iop;
169}

171static void
172musthave(int c, int cf)
173{
if ((token(cf)((reject) ? (reject = 0, symbol) : (symbol = yylex(cf)))) != c)
syntaxerr(NULL((void *)0));
176}

178static struct op *
179nested(int type, int smark, int emark)
180{
struct op *t;
struct nesting_state old_nesting;

nesting_push(&old_nesting, smark);
t = c_list(true1);
musthave(emark, KEYWORD(1<<(3))|ALIAS(1<<(2)));
nesting_pop(&old_nesting);
return (block(type, t, NULL((void *)0), NULL((void *)0)));
189}

191static struct op *
192get_command(int cf)
193{
struct op *t;
int c, iopn = 0, syniocf;
struct ioword *iop, **iops;
XPtrV args, vars;
struct nesting_state old_nesting;

iops = areallocarray(NULL((void *)0), NUFILE32 + 1,
   sizeof(struct ioword *), ATEMP&genv->area);
XPinit(args, 16)do { void **vp__; vp__ = areallocarray(((void *)0), 16, sizeof
(void *), &genv->area); (args).cur = (args).beg = vp__
; (args).end = vp__ + 16; } while (0);
XPinit(vars, 16)do { void **vp__; vp__ = areallocarray(((void *)0), 16, sizeof
(void *), &genv->area); (vars).cur = (vars).beg = vp__
; (vars).end = vp__ + 16; } while (0);

syniocf = KEYWORD(1<<(3))|ALIAS(1<<(2));
switch (c = token(cf|KEYWORD|ALIAS|VARASN)((reject) ? (reject = 0, symbol) : (symbol = yylex(cf|(1<<
(3))|(1<<(2))|(1<<(5)))))) {
default:
reject = true1;
afree(iops, ATEMP&genv->area);
XPfree(args)afree((args).beg, &genv->area);
XPfree(vars)afree((vars).beg, &genv->area);
return NULL((void *)0); /* empty line */

case LWORD256:
case REDIR276:
reject = true1;
syniocf &= ~(KEYWORD(1<<(3))|ALIAS(1<<(2)));
t = newtp(TCOM1);
t->lineno = source->line;
while (1) {
	cf = (t->u.evalflags ? ARRAYVAR(1<<(6)) : 0) |
	    (XPsize(args)((args).cur - (args).beg) == 0 ? ALIAS(1<<(2))|VARASN(1<<(5)) : CMDWORD(1<<(8)));
	switch (tpeek(cf)((reject) ? (symbol) : (reject = 1, symbol = yylex(cf)))) {
	case REDIR276:
		if (iopn >= NUFILE32)
			yyerror("too many redirections\n");
		iops[iopn++] = synio(cf);
		break;

	case LWORD256:
		reject = false0;
		/* the iopn == 0 and XPsize(vars) == 0 are
		 * dubious but at&t ksh acts this way
		 */
		if (iopn == 0 && XPsize(vars)((vars).cur - (vars).beg) == 0 &&
		    XPsize(args)((args).cur - (args).beg) == 0 &&
		    assign_command(ident))
			t->u.evalflags = DOVACHECK(1<<(9));
		if ((XPsize(args)((args).cur - (args).beg) == 0 || Flag(FKEYWORD)(shell_flags[(int) (FKEYWORD)])) &&
		    is_wdvarassign(yylval.cp))
			XPput(vars, yylval.cp)do { if ((vars).cur >= (vars).end) { int n = ((vars).cur -
 (vars).beg); (vars).beg = areallocarray((vars).beg, n, 2 * sizeof
(void *), &genv->area); (vars).cur = (vars).beg + n; (
vars).end = (vars).cur + n; } *(vars).cur++ = (yylval.cp); } while
 (0);
		else
			XPput(args, yylval.cp)do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (yylval.cp); } while
 (0);
		break;

	case '(':
		/* Check for "> foo (echo hi)", which at&t ksh
		 * allows (not POSIX, but not disallowed)
		 */
		afree(t, ATEMP&genv->area);
		if (XPsize(args)((args).cur - (args).beg) == 0 && XPsize(vars)((vars).cur - (vars).beg) == 0) {
			reject = false0;
			goto Subshell;
		}
		/* Must be a function */
		if (iopn != 0 || XPsize(args)((args).cur - (args).beg) != 1 ||
		    XPsize(vars)((vars).cur - (vars).beg) != 0)
			syntaxerr(NULL((void *)0));
		reject = false0;
		/*(*/
		musthave(')', 0);
		t = function_body(XPptrv(args)((args).beg)[0], false0);
		goto Leave;

	default:
		goto Leave;
	}
}
 Leave:
break;

 Subshell:
case '(':
t = nested(TPAREN2, '(', ')');
break;

case '{': /*}*/
t = nested(TBRACE17, '{', '}');
break;

case MDPAREN277:
 {
static const char let_cmd[] = {
	CHAR1, 'l', CHAR1, 'e',
	CHAR1, 't', EOS0
};
/* Leave KEYWORD in syniocf (allow if (( 1 )) then ...) */
t = newtp(TCOM1);
t->lineno = source->line;
reject = false0;
XPput(args, wdcopy(let_cmd, ATEMP))do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (wdcopy(let_cmd
, &genv->area)); } while (0);
musthave(LWORD256,LETEXPR(1<<(4)));
XPput(args, yylval.cp)do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (yylval.cp); } while
 (0);
break;
 }

case DBRACKET279: /* [[ .. ]] */
/* Leave KEYWORD in syniocf (allow if [[ -n 1 ]] then ...) */
t = newtp(TDBRACKET8);
reject = false0;
{
	Test_env te;

	te.flags = TEF_DBRACKET(1<<(1));
	te.pos.av = &args;
	te.isa = dbtestp_isa;
	te.getopnd = dbtestp_getopnd;
	te.eval = dbtestp_eval;
	te.error = dbtestp_error;

	test_parse(&te);
}
break;

case FOR267:
case SELECT268:
t = newtp((c == FOR267) ? TFOR9 : TSELECT10);
musthave(LWORD256, ARRAYVAR(1<<(6)));
if (!is_wdvarname(yylval.cp, true1))
	yyerror("%s: bad identifier\n",
	    c == FOR267 ? "for" : "select");
t->str = str_save(ident, ATEMP&genv->area);
nesting_push(&old_nesting, c);
t->vars = wordlist();
t->left = dogroup();
nesting_pop(&old_nesting);
break;

case WHILE269:
case UNTIL270:
nesting_push(&old_nesting, c);
t = newtp((c == WHILE269) ? TWHILE13 : TUNTIL14);
t->left = c_list(true1);
if (t->left == NULL((void *)0))
	syntaxerr(NULL((void *)0));
t->right = dogroup();
nesting_pop(&old_nesting);
break;

case CASE265:
t = newtp(TCASE11);
musthave(LWORD256, 0);
t->str = yylval.cp;
nesting_push(&old_nesting, c);
t->left = caselist();
nesting_pop(&old_nesting);
break;

case IF260:
nesting_push(&old_nesting, c);
t = newtp(TIF12);
t->left = c_list(true1);
t->right = thenpart();
musthave(FI264, KEYWORD(1<<(3))|ALIAS(1<<(2)));
nesting_pop(&old_nesting);
break;

case BANG278:
syniocf &= ~(KEYWORD(1<<(3))|ALIAS(1<<(2)));
t = pipeline(0);
if (t == NULL((void *)0))
	syntaxerr(NULL((void *)0));
t = block(TBANG7, NULL((void *)0), t, NULL((void *)0));
break;

case TIME275:
syniocf &= ~(KEYWORD(1<<(3))|ALIAS(1<<(2)));
t = pipeline(0);
if (t) {
	if (t->str) {
		t->str = str_save(t->str, ATEMP&genv->area);
	} else {
		t->str = alloc(2, ATEMP&genv->area);
		t->str[0] = '\0'; /* TF_* flags */
		t->str[1] = '\0';
	}
}
t = block(TTIME20, t, NULL((void *)0), NULL((void *)0));
break;

case FUNCTION274:
musthave(LWORD256, 0);
t = function_body(yylval.cp, true1);
break;
}

while ((iop = synio(syniocf)) != NULL((void *)0)) {
if (iopn >= NUFILE32)
	yyerror("too many redirections\n");
iops[iopn++] = iop;
}

if (iopn == 0) {
afree(iops, ATEMP&genv->area);
t->ioact = NULL((void *)0);
} else {
iops[iopn++] = NULL((void *)0);
iops = areallocarray(iops, iopn,
    sizeof(struct ioword *), ATEMP&genv->area);
t->ioact = iops;
}

if (t->type == TCOM1 || t->type == TDBRACKET8) {
XPput(args, NULL)do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (((void *)0)); }
 while (0);
t->args = (char **) XPclose(args)areallocarray((args).beg, ((args).cur - (args).beg), sizeof(void
 *), &genv->area);
XPput(vars, NULL)do { if ((vars).cur >= (vars).end) { int n = ((vars).cur -
 (vars).beg); (vars).beg = areallocarray((vars).beg, n, 2 * sizeof
(void *), &genv->area); (vars).cur = (vars).beg + n; (
vars).end = (vars).cur + n; } *(vars).cur++ = (((void *)0)); }
 while (0);
t->vars = (char **) XPclose(vars)areallocarray((vars).beg, ((vars).cur - (vars).beg), sizeof(void
 *), &genv->area);
} else {
XPfree(args)afree((args).beg, &genv->area);
XPfree(vars)afree((vars).beg, &genv->area);
}

return t;
414}

416static struct op *
417dogroup(void)
418{
int c;
struct op *list;

c = token(CONTIN|KEYWORD|ALIAS)((reject) ? (reject = 0, symbol) : (symbol = yylex((1<<
(0))|(1<<(3))|(1<<(2)))));
/* A {...} can be used instead of do...done for for/select loops
* but not for while/until loops - we don't need to check if it
* is a while loop because it would have been parsed as part of
* the conditional command list...
*/
if (c == DO271)
c = DONE272;
else if (c == '{')
c = '}';
else
syntaxerr(NULL((void *)0));
list = c_list(true1);
musthave(c, KEYWORD(1<<(3))|ALIAS(1<<(2)));
return list;
437}

439static struct op *
440thenpart(void)
441{
struct op *t;

musthave(THEN261, KEYWORD(1<<(3))|ALIAS(1<<(2)));
t = newtp(0);
t->left = c_list(true1);
if (t->left == NULL((void *)0))
syntaxerr(NULL((void *)0));
t->right = elsepart();
return (t);
451}

453static struct op *
454elsepart(void)
455{
struct op *t;

switch (token(KEYWORD|ALIAS|VARASN)((reject) ? (reject = 0, symbol) : (symbol = yylex((1<<
(3))|(1<<(2))|(1<<(5)))))) {
case ELSE262:
if ((t = c_list(true1)) == NULL((void *)0))
	syntaxerr(NULL((void *)0));
return (t);

case ELIF263:
t = newtp(TELIF15);
t->left = c_list(true1);
t->right = thenpart();
return (t);

default:
reject = true1;
}
return NULL((void *)0);
474}

476static struct op *
477caselist(void)
478{
struct op *t, *tl;
int c;

c = token(CONTIN|KEYWORD|ALIAS)((reject) ? (reject = 0, symbol) : (symbol = yylex((1<<
(0))|(1<<(3))|(1<<(2)))));
/* A {...} can be used instead of in...esac for case statements */
if (c == IN273)
c = ESAC266;
else if (c == '{')
c = '}';
else
syntaxerr(NULL((void *)0));
t = tl = NULL((void *)0);
while ((tpeek(CONTIN|KEYWORD|ESACONLY)((reject) ? (symbol) : (reject = 1, symbol = yylex((1<<
(0))|(1<<(3))|(1<<(7)))))) != c) { /* no ALIAS here */
struct op *tc = casepart(c);
if (tl == NULL((void *)0))
	t = tl = tc, tl->right = NULL((void *)0);
else
	tl->right = tc, tl = tc;
}
musthave(c, KEYWORD(1<<(3))|ALIAS(1<<(2)));
return (t);
500}

502static struct op *
503casepart(int endtok)
504{
struct op *t;
int c;
XPtrV ptns;

XPinit(ptns, 16)do { void **vp__; vp__ = areallocarray(((void *)0), 16, sizeof
(void *), &genv->area); (ptns).cur = (ptns).beg = vp__
; (ptns).end = vp__ + 16; } while (0);
t = newtp(TPAT16);
c = token(CONTIN|KEYWORD)((reject) ? (reject = 0, symbol) : (symbol = yylex((1<<
(0))|(1<<(3))))); /* no ALIAS here */
if (c != '(')
reject = true1;
do {
musthave(LWORD256, 0);
XPput(ptns, yylval.cp)do { if ((ptns).cur >= (ptns).end) { int n = ((ptns).cur -
 (ptns).beg); (ptns).beg = areallocarray((ptns).beg, n, 2 * sizeof
(void *), &genv->area); (ptns).cur = (ptns).beg + n; (
ptns).end = (ptns).cur + n; } *(ptns).cur++ = (yylval.cp); } while
 (0);
} while ((c = token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0)))) == '|');
reject = true1;
XPput(ptns, NULL)do { if ((ptns).cur >= (ptns).end) { int n = ((ptns).cur -
 (ptns).beg); (ptns).beg = areallocarray((ptns).beg, n, 2 * sizeof
(void *), &genv->area); (ptns).cur = (ptns).beg + n; (
ptns).end = (ptns).cur + n; } *(ptns).cur++ = (((void *)0)); }
 while (0);
t->vars = (char **) XPclose(ptns)areallocarray((ptns).beg, ((ptns).cur - (ptns).beg), sizeof(void
 *), &genv->area);
musthave(')', 0);

t->left = c_list(true1);
/* Note: Posix requires the ;; */
if ((tpeek(CONTIN|KEYWORD|ALIAS)((reject) ? (symbol) : (reject = 1, symbol = yylex((1<<
(0))|(1<<(3))|(1<<(2)))))) != endtok)
musthave(BREAK259, CONTIN(1<<(0))|KEYWORD(1<<(3))|ALIAS(1<<(2)));
return (t);
528}

530static struct op *
531function_body(char *name,
  int ksh_func)		/* function foo { ... } vs foo() { .. } */
533{
char *sname, *p;
struct op *t;
int old_func_parse;

sname = wdstrip(name);
/* Check for valid characters in name.  posix and ksh93 say only
* allow [a-zA-Z_0-9] but this allows more as old pdksh's have
* allowed more (the following were never allowed:
*	nul space nl tab $ ' " \ ` ( ) & | ; = < >
*  C_QUOTE covers all but = and adds # [ ? *)
*/
for (p = sname; *p; p++)
if (ctype(*p, C_QUOTE)!!(ctypes[(unsigned char)(*p)]&((1<<(8)))) || *p == '=')
	yyerror("%s: invalid function name\n", sname);

t = newtp(TFUNCT19);
t->str = sname;
t->u.ksh_func = ksh_func;
t->lineno = source->line;

/* Note that POSIX allows only compound statements after foo(), sh and
* at&t ksh allow any command, go with the later since it shouldn't
* break anything.  However, for function foo, at&t ksh only accepts
* an open-brace.
*/
if (ksh_func) {
musthave('{', CONTIN(1<<(0))|KEYWORD(1<<(3))|ALIAS(1<<(2))); /* } */
reject = true1;
}

old_func_parse = genv->flags & EF_FUNC_PARSE(1<<(0));
genv->flags |= EF_FUNC_PARSE(1<<(0));
if ((t->left = get_command(CONTIN(1<<(0)))) == NULL((void *)0)) {
/*
 * Probably something like foo() followed by eof or ;.
 * This is accepted by sh and ksh88.
 * To make "typeset -f foo" work reliably (so its output can
 * be used as input), we pretend there is a colon here.
 */
t->left = newtp(TCOM1);
t->left->args = areallocarray(NULL((void *)0), 2, sizeof(char *), ATEMP&genv->area);
t->left->args[0] = alloc(3, ATEMP&genv->area);
t->left->args[0][0] = CHAR1;
t->left->args[0][1] = ':';
t->left->args[0][2] = EOS0;
t->left->args[1] = NULL((void *)0);
t->left->vars = alloc(sizeof(char *), ATEMP&genv->area);
t->left->vars[0] = NULL((void *)0);
t->left->lineno = 1;
}
if (!old_func_parse)
genv->flags &= ~EF_FUNC_PARSE(1<<(0));

return t;
588}

590static char **
591wordlist(void)
592{
int c;
XPtrV args;

XPinit(args, 16)do { void **vp__; vp__ = areallocarray(((void *)0), 16, sizeof
(void *), &genv->area); (args).cur = (args).beg = vp__
; (args).end = vp__ + 16; } while (0);
/* Posix does not do alias expansion here... */
if ((c = token(CONTIN|KEYWORD|ALIAS)((reject) ? (reject = 0, symbol) : (symbol = yylex((1<<
(0))|(1<<(3))|(1<<(2)))))) != IN273) {
if (c != ';') /* non-POSIX, but at&t ksh accepts a ; here */
	reject = true1;
return NULL((void *)0);
}
while ((c = token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0)))) == LWORD256)
XPput(args, yylval.cp)do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (yylval.cp); } while
 (0);
if (c != '\n' && c != ';')
syntaxerr(NULL((void *)0));
XPput(args, NULL)do { if ((args).cur >= (args).end) { int n = ((args).cur -
 (args).beg); (args).beg = areallocarray((args).beg, n, 2 * sizeof
(void *), &genv->area); (args).cur = (args).beg + n; (
args).end = (args).cur + n; } *(args).cur++ = (((void *)0)); }
 while (0);
return (char **) XPclose(args)areallocarray((args).beg, ((args).cur - (args).beg), sizeof(void
 *), &genv->area);
609}

611/*
* supporting functions
*/

615static struct op *
616block(int type, struct op *t1, struct op *t2, char **wp)
617{
struct op *t;

t = newtp(type);
t->left = t1;
t->right = t2;
t->vars = wp;
return (t);
625}

627const	struct tokeninfo {
const char *name;
short	val;
short	reserved;
631} tokentab[] = {
/* Reserved words */
{ "if",		IF260,	true1 },
{ "then",	THEN261,	true1 },
{ "else",	ELSE262,	true1 },
{ "elif",	ELIF263,	true1 },
{ "fi",		FI264,	true1 },
{ "case",	CASE265,	true1 },
{ "esac",	ESAC266,	true1 },
{ "for",	FOR267,	true1 },
{ "select",	SELECT268,	true1 },
{ "while",	WHILE269,	true1 },
{ "until",	UNTIL270,	true1 },
{ "do",		DO271,	true1 },
{ "done",	DONE272,	true1 },
{ "in",		IN273,	true1 },
{ "function",	FUNCTION274, true1 },
{ "time",	TIME275,	true1 },
{ "{",		'{',	true1 },
{ "}",		'}',	true1 },
{ "!",		BANG278,	true1 },
{ "[[",		DBRACKET279, true1 },
/* Lexical tokens (0[EOF], LWORD and REDIR handled specially) */
{ "&&",		LOGAND257,	false0 },
{ "||",		LOGOR258,	false0 },
{ ";;",		BREAK259,	false0 },
{ "((",		MDPAREN277, false0 },
{ "|&",		COPROC280,	false0 },
/* and some special cases... */
{ "newline",	'\n',	false0 },
{ 0 }
662};

664void
665initkeywords(void)
666{
struct tokeninfo const *tt;
struct tbl *p;

ktinit(&keywords, APERM&aperm, 32); /* must be 2^n (currently 20 keywords) */
for (tt = tokentab; tt->name; tt++) {
if (tt->reserved) {
	p = ktenter(&keywords, tt->name, hash(tt->name));
	p->flag |= DEFINED(1<<(1))|ISSET(1<<(2));
	p->type = CKEYWD6;
	p->val.i = tt->val;
}
}
679}

681static void
682syntaxerr(const char *what)
683{
char redir[6];	/* 2<<- is the longest redirection, I think */
const char *s;
struct tokeninfo const *tt;
int c;

if (!what)
what = "unexpected";
reject = true1;
c = token(0)((reject) ? (reject = 0, symbol) : (symbol = yylex(0)));
  Again:
switch (c) {
case 0:
if (nesting.start_token) {
	c = nesting.start_token;
	source->errline = nesting.start_line;
	what = "unmatched";
	goto Again;
}
/* don't quote the EOF */
yyerror("syntax error: unexpected EOF\n");
/* NOTREACHED */

case LWORD256:
s = snptreef(NULL((void *)0), 32, "%S", yylval.cp);
break;

case REDIR276:
s = snptreef(redir, sizeof(redir), "%R", yylval.iop);
break;

default:
for (tt = tokentab; tt->name; tt++)
	if (tt->val == c)
	    break;
if (tt->name)
	s = tt->name;
else {
	if (c > 0 && c < 256) {
		redir[0] = c;
		redir[1] = '\0';
	} else
		shf_snprintf(redir, sizeof(redir),
			"?%d", c);
	s = redir;
}
}
yyerror("syntax error: `%s' %s\n", s, what);
731}

733static void
734nesting_push(struct nesting_state *save, int tok)
735{
*save = nesting;
nesting.start_token = tok;
nesting.start_line = source->line;
739}

741static void
742nesting_pop(struct nesting_state *saved)
743{
nesting = *saved;
745}

747static struct op *
748newtp(int type)
749{
struct op *t;

t = alloc(sizeof(*t), ATEMP&genv->area);
t->type = type;
t->u.evalflags = 0;
t->args = t->vars = NULL((void *)0);
t->ioact = NULL((void *)0);
t->left = t->right = NULL((void *)0);
t->str = NULL((void *)0);
return (t);
760}

762struct op *
763compile(Source *s)
764{
nesting.start_token = 0;
nesting.start_line = 0;
herep = heres;
source = s;
yyparse();
return outtree;
771}

773/* This kludge exists to take care of sh/at&t ksh oddity in which
* the arguments of alias/export/readonly/typeset have no field
* splitting, file globbing, or (normal) tilde expansion done.
* at&t ksh seems to do something similar to this since
*	$ touch a=a; typeset a=[ab]; echo "$a"
*	a=[ab]
*	$ x=typeset; $x a=[ab]; echo "$a"
*	a=a
*	$
*/
783static int
784assign_command(char *s)
785{
if (Flag(FPOSIX)(shell_flags[(int) (FPOSIX)]) || !*s)
return 0;
return (strcmp(s, "alias") == 0) ||
   (strcmp(s, "export") == 0) ||
   (strcmp(s, "readonly") == 0) ||
   (strcmp(s, "typeset") == 0);
792}

794/* Check if we are in the middle of reading an alias */
795static int
796inalias(struct source *s)
797{
for (; s && s->type == SALIAS7; s = s->next)
if (!(s->flags & SF_ALIASEND(1<<(2))))
	return 1;
return 0;
802}


805/* Order important - indexed by Test_meta values
* Note that ||, &&, ( and ) can't appear in as unquoted strings
* in normal shell input, so these can be interpreted unambiguously
* in the evaluation pass.
*/
810static const char dbtest_or[] = { CHAR1, '|', CHAR1, '|', EOS0 };
811static const char dbtest_and[] = { CHAR1, '&', CHAR1, '&', EOS0 };
812static const char dbtest_not[] = { CHAR1, '!', EOS0 };
813static const char dbtest_oparen[] = { CHAR1, '(', EOS0 };
814static const char dbtest_cparen[] = { CHAR1, ')', EOS0 };
815const char *const dbtest_tokens[] = {
dbtest_or, dbtest_and, dbtest_not,
dbtest_oparen, dbtest_cparen
818};
819const char db_close[] = { CHAR1, ']', CHAR1, ']', EOS0 };
820const char db_lthan[] = { CHAR1, '<', EOS0 };
821const char db_gthan[] = { CHAR1, '>', EOS0 };

823/* Test if the current token is a whatever.  Accepts the current token if
* it is.  Returns 0 if it is not, non-zero if it is (in the case of
* TM_UNOP and TM_BINOP, the returned value is a Test_op).
*/
827static int
828dbtestp_isa(Test_env *te, Test_meta meta)
829{
int c = tpeek(ARRAYVAR | (meta == TM_BINOP ? 0 : CONTIN))((reject) ? (symbol) : (reject = 1, symbol = yylex((1<<
(6)) | (meta == TM_BINOP ? 0 : (1<<(0))))));
1
Assuming 'reject' is not equal to 0→
2
←
'?' condition is true→
int uqword = 0;
char *save = NULL((void *)0);
int ret = 0;

/* unquoted word? */
uqword = c == LWORD256 && *ident;
3
←
Assuming 'c' is equal to LWORD→

if (meta == TM_OR)
4
←
Assuming 'meta' is not equal to TM_OR→
5
←
Taking false branch→
ret = c == LOGOR258;
else if (meta == TM_AND)
6
←
Assuming 'meta' is not equal to TM_AND→
7
←
Taking false branch→
ret = c == LOGAND257;
else if (meta == TM_NOT)
8
←
Assuming 'meta' is not equal to TM_NOT→
9
←
Taking false branch→
ret = uqword && strcmp(yylval.cp, dbtest_tokens[(int) TM_NOT]) == 0;
else if (meta == TM_OPAREN)
10
←
Assuming 'meta' is not equal to TM_OPAREN→
11
←
Taking false branch→
ret = c == '(' /*)*/;
else if (meta == TM_CPAREN)
12
←
Assuming 'meta' is not equal to TM_CPAREN→
ret = c == /*(*/ ')';
else if (meta == TM_UNOP || meta == TM_BINOP) {
13
←
Assuming 'meta' is equal to TM_UNOP→
if (meta13.1
'meta' is not equal to TM_BINOP
 == TM_BINOP && c == REDIR276 &&
    (yylval.iop->flag == IOREAD0x1 || yylval.iop->flag == IOWRITE0x2)) {
	ret = 1;
	save = wdcopy(yylval.iop->flag == IOREAD0x1 ?
	    db_lthan : db_gthan, ATEMP&genv->area);
} else if (uqword && (ret = (int) test_isop(te, meta, ident)))
14
←
Assuming 'uqword' is not equal to 0→
15
←
Assuming 'ret' is not equal to 0→
16
←
Taking true branch→
	save = yylval.cp;
} else /* meta == TM_END */
ret = uqword && strcmp(yylval.cp, db_close) == 0;
if (ret16.1
'ret' is not equal to 0
) {
17
←
Taking true branch→
reject = false0;
if (meta17.1
'meta' is not equal to TM_END
 != TM_END) {
18
←
Taking true branch→
	if (!save)
19
←
Assuming 'save' is null→
20
←
Taking true branch→
		save = wdcopy(dbtest_tokens[(int) meta], ATEMP&genv->area);
21
←
1st function call argument is an uninitialized value
	XPput(*te->pos.av, save)do { if ((*te->pos.av).cur >= (*te->pos.av).end) { int
 n = ((*te->pos.av).cur - (*te->pos.av).beg); (*te->
pos.av).beg = areallocarray((*te->pos.av).beg, n, 2 * sizeof
(void *), &genv->area); (*te->pos.av).cur = (*te->
pos.av).beg + n; (*te->pos.av).end = (*te->pos.av).cur +
 n; } *(*te->pos.av).cur++ = (save); } while (0);
}
}
return ret;
867}

869static const char *
870dbtestp_getopnd(Test_env *te, Test_op op, int do_eval)
871{
int c = tpeek(ARRAYVAR)((reject) ? (symbol) : (reject = 1, symbol = yylex((1<<
(6)))));

if (c != LWORD256)
return NULL((void *)0);

reject = false0;
XPput(*te->pos.av, yylval.cp)do { if ((*te->pos.av).cur >= (*te->pos.av).end) { int
 n = ((*te->pos.av).cur - (*te->pos.av).beg); (*te->
pos.av).beg = areallocarray((*te->pos.av).beg, n, 2 * sizeof
(void *), &genv->area); (*te->pos.av).cur = (*te->
pos.av).beg + n; (*te->pos.av).end = (*te->pos.av).cur +
 n; } *(*te->pos.av).cur++ = (yylval.cp); } while (0);

return null;
881}

883static int
884dbtestp_eval(Test_env *te, Test_op op, const char *opnd1, const char *opnd2,
  int do_eval)
886{
return 1;
888}

890static void
891dbtestp_error(Test_env *te, int offset, const char *msg)
892{
te->flags |= TEF_ERROR(1<<(0));

if (offset < 0) {
reject = true1;
/* Kludgy to say the least... */
symbol = LWORD256;
yylval.cp = *(XPptrv(*te->pos.av)((*te->pos.av).beg) + XPsize(*te->pos.av)((*te->pos.av).cur - (*te->pos.av).beg) +
    offset);
}
syntaxerr(msg);
903}